Privacy Manager, China

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com .

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Legal & Compliance

Job Sub Function:

Enterprise Compliance

Job Category:

Professional

All Job Posting Locations:

Shanghai, China

Job Description:

DePuy Synthes is recruiting for a Privacy Manager, located in Shanghai, China.

The Privacy manager of DePuy Synthes in China is responsible for implementing and overseeing the privacy compliance program for all DePuy Synthes activities in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure DePuy Synthes is operating in compliance with applicable local privacy laws as well as DePuy Synthes global privacy program.

In this role, the privacy manager will have the opportunity to actively support and shape all projects related activities of DePuy Synthes in China that involve privacy considerations, providing strategic advice to ensure compliance with local data protection laws while enabling responsible innovation across a complex medical technology organization.

In this position, the individual shall serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China.

The position will have a direct line of reporting to the Asia Pacific Data protection Officer.

Key Responsibilities

Lead the implementation and ongoing oversight of the DePuy Synthes global privacy program in China, identifying privacy risks and developing policies and procedures, training, and controls to ensure alignment with applicable local data protection laws and regulations as well as the DePuy Synthes global privacy program.

Advise business partners and key functional partners on privacy and data protection requirements associated with new products, digital health solutions, clinical activities, and commercial initiatives, to ensure privacy by design is embedded across business operations and digital products.

Serve towards the authorities as the designated Personal Information protection officer for DePuy Synthes entities in China and fulfil related obligations.

Lead efforts to embed privacy capabilities in named privacy champions from relevant functions, including handling escalations, driving consistency and delivering ongoing training and education to the champions in China.

Oversee local privacy impact assessments, cross border data transfer filings, and mitigation plans for high‑risk processing activities.

Partner with Information Security and Legal teams to support incident response, breach management, and regulatory communications in China when required.

Lead privacy training and awareness programs to strengthen a culture of data protection and accountability across the organization.

Monitor regulatory developments and emerging privacy risks, translating requirements into practical business guidance, identifying any required regional-specific variants from global privacy policies, standards, and procedures to support compliant collection, use, transfer, and retention of personal data in China.

Maintain external relationships with China regulators and internal stakeholders to support audits, inquiries, inspections and data incident responses in conjunction with cross-functional partners.

Qualifications

Education

Bachelor’s degree required, preferably in Law

Advanced degree (JD, LLM, MBA, or equivalent) preferred.

Experience and Skills

Minimum 6 to 8 years of experience in privacy, data protection legal roles, including in a complex global corporation or private practice.

Specific data protection or privacy experience within medical devices, medtech, life sciences pharmaceutical industries or healthcare insurers or systems.

Strong working knowledge of China privacy regulations (e.g., PIPL, CBDT, DSL) and their business application.

Experience partnering with technology, security, and digital teams on privacy‑by‑design initiatives.

Significant experience supporting and implementing China privacy program.

Ability to maintain the highest standards of quality, compliance and accountability when advising the business.

Ability to translate a wide variety of principles and, sometimes complex, legal requirements into actionable solutions for the business.

Ability to work autonomously and in a remote team, with various stakeholders in a matrix environment.

Strong negotiation and communication skills (both oral and written).

Chinese native, Oral and written English proficiency, excellent drafting skills.

Travel: Up to 10% international travel.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.

#LI-Hybrid

#DePuySynthesCareers

Required Skills:

Preferred Skills:

Audit and Compliance Trends, Coaching, Compliance Management, Compliance Policies, Compliance Risk, Confidentiality, Consulting, Controls Compliance, Developing Others, Internal Auditing, Investigation Techniques, Legal Function, Legal Services, Policy Development, Process Improvements, Tactical Planning, Technical Credibility