Data Protection Officer in Burgess Hill

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

About the Role

We are seeking an experienced, high-visibility Data Protection Officer (DPO) to lead our privacy compliance strategy and champion a strong data protection culture. Operating with complete statutory independence, you will serve as the primary advisor to the Senior Leadership Team (SLT), direct our local privacy framework, and oversee high-impact digital health and AI initiatives. You will lead the Local Privacy Office, line manage the Data Privacy Manager, and serve as our designated point of contact for regulators and data subjects.

Key Responsibilities

• Strategic Leadership & Independence: Operate with statutory independence to set the position of the Local Privacy Office, advise senior leadership, and promote data privacy at the highest management levels.
• Regulatory Oversight: Act as the formal, designated contact point for regulators (ICO and ROI Data Protection Commission) and data subjects. Manage formal inquiries and data subject requests.
• Risk Management & DPIAs: Provide risk-based guidance on high-impact technology, special category data, and digital health initiatives. Provide final sign-off on Data Protection Impact Assessments (DPIAs).
• Breach Response & Reporting: Solely authorize, oversee, and direct the reporting of personal data breaches to regulatory authorities and affected data subjects.
• Team & Framework Management: Line manage and mentor the Data Privacy Manager while coordinating the Local Privacy Office. Oversee compliance monitoring, internal audits, and frameworks (ISO27001, CyberEssentials Plus, DSPT).

Key Relationships

• Internal: Affiliate Legal & Compliance Department, Senior Leadership Team (SLT), Group Privacy stakeholders, Data Privacy Liaisons, and IT/Cybersecurity teams.
• External: Information Commissioner's Office (ICO), Data Protection Commission (ROI), data subjects, and trade bodies.

Qualifications & Experience

Essential Criteria:

• Relevant Degree
• Proven track record delivering data privacy compliance frameworks within a complex organization.
• Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018.
• Leadership experience managing teams, projects, and influencing matrix stakeholders.
• Experience with emerging technologies (e.g., AI), digital health, and information governance systems (e.g., ISO27001).
• Strong risk analysis, analytical, project management, and communication skills.

Desirable Criteria:

• CIPP (Certified Information Privacy Professional) or recognized privacy qualification.

Core Competencies & Values

• Roche Core Values: Integrity, Courage, and Passion.
• Decision Making & Expertise: Independent judgment, commercial awareness, and healthcare/IT sector awareness.
• Leadership & Collaboration: Ability to inspire, coach junior team members, navigate change, and foster open communication under pressure.

At Roche Products we believe diversity drives innovation and we are committed to building a diverse and flexible working environment. All qualified applicants will receive consideration for employment without regard to race, religion or belief, sex, gender reassignment, sexual orientation, marriage and civil partnership, pregnancy and maternity, disability or age. We recognise the importance of flexible working and will review all applicants’ requests with care. At Roche difference is valued and we are proud to be an equal opportunity employer where you are encouraged to bring your whole self to work.