Senior Privacy Compliance Manager

Role Description:
The Privacy Compliance Senior Manager for the Office of Ethics and Compliance (OEC) will serve as the regional privacy compliance lead for assigned AbbVie affiliates, business units, Medical and R&D teams. The role is responsible for translating AbbVie’s Global Privacy Program into regional strategy, governance, risk management, and implementation priorities, while partnering with the legal Privacy Senior Counsel, Global Privacy Office, affiliate leadership, and cross-functional stakeholders to strengthen privacy compliance across the region.
This role is expected to operate with significant independence, exercise sound judgment on complex privacy matters, influence senior stakeholders, and drive consistent implementation of privacy compliance priorities across multiple affiliates and functions. The role will also oversee regional privacy initiatives, coordinate with local privacy contacts, and represent the Global Privacy Office in regional governance forums.
Responsibilities:
Lead the regional implementation, governance, and continuous improvement of AbbVie’s Global Privacy Program in cooperation with the Privacy Compliance Director and Global Privacy Office.
Provide strategic privacy compliance partnership to affiliate and business unit leadership across the assigned region, serving as a trusted advisor on privacy risks, controls, accountability, and decision-making for key initiatives.
Support regional and global strategy for cross-border data transfers by advising on transfer obligations, localization requirements, regulatory restrictions, and other legal or operational constraints that may affect business-critical global data flows.
Identify, assess, resolve, and escalate complex privacy compliance issues, ensuring timely engagement with the Privacy Compliance Director, Global Privacy Office, Legal, OEC, Information Security, and relevant business stakeholders as appropriate.
Detect, anticipate, and prevent privacy-related risks.
Provide privacy guidance on business initiatives and projects.
Monitor data flows and maintain privacy records in coordination with local functions.
Provide support on the management of Data Subjects Rights requests in the assigned region and assist with the Global Privacy Office inbox triage.
Lead or coordinate regional implementation of global and regional privacy projects, ensuring local requirements, resourcing, stakeholder engagement, and change management are addressed effectively.
Raise local privacy awareness through training and communication.
Aid Incident Response Team managing any data breaches originating or having an impact on the assigned Affiliates and business units.
Holds risk assessment conversations with internal audit during the audit planning and support any privacy audits for the assigned Affiliates and business units.
Help monitor plans to effectively measure compliance with the privacy program’s key requirements for the assigned Affiliates and business units and identify concern areas early.
Monitor industry, legal, regulatory, and enforcement developments and translate relevant changes into practical regional actions that maintain and enhance AbbVie’s privacy compliance program.
Shape the external privacy environment through engagement with local privacy working groups, industry associations, IPMPC working groups, IAPP workshops, and other relevant forums where appropriate. Act as Data Protection Officer for assigned affiliates in the region where required and serve as a primary point of contact for external authorities.
Represent the Global Privacy Office in ACIFs and other regional or global governance forums, providing privacy input and risk insights.
Strong expertise in privacy, data protection, compliance, and technology matters, including the ability to apply privacy requirements to complex business processes and data-driven initiatives.
Familiarity with compliance processes and practices and enterprise technology systems, such as HR management and CRM systems, risk management is considered an advantage.
Prior experience in the pharmaceutical, medical device, life sciences, or similarly regulated industry is strongly preferred.
Excellent communication, influencing, and stakeholder management skills are required, including a proven ability to collaborate effectively across a global matrix organization.
Experience advising on and operationalizing privacy requirements across JAPAC markets, including regulations such as Korea’s PIPA, China’s PIPL, Japan’s APPI, and other applicable regional privacy laws, is strongly preferred.
Fluency in English and Chinese is required.
Prior privacy and/or security certifications or credentials (e.g. CIPP) are considered an advantage.
Preferred Qualifications: Bachelor’s degree or equivalent is required; advanced degree in law, privacy, compliance, information governance, public policy, or related field is preferred.
Job Classification: minimum of 5 years of work experience in privacy
Primary Location: AbbVie commercial office
Organization: Office of Ethics and Compliance
Travel: 5%

Employment type
Full-time

Work arrangement
Hybrid