Associate Director, Privacy & Compliance Investigations at Daiichi Sankyo

Join a Legacy of Innovation 110 Years and Counting!

Daiichi Sankyo Group is dedicated to the creation and supply of innovative pharmaceutical therapies to improve standards of care and address diversified, unmet medical needs of people globally by leveraging our world-class science and technology. With more than 100 years of scientific expertise and a presence in more than 20 countries, Daiichi Sankyo and its 16,000 employees around the world draw upon a rich legacy of innovation and a robust pipeline of promising new medicines to help people. Under the Group’s 2025 Vision to become a “Global Pharma Innovator with Competitive Advantage in Oncology,” Daiichi Sankyo is primarily focused on providing novel therapies in oncology, as well as other research areas centered around rare diseases and immune disorders.

Summary

The Associate Director, Privacy & Compliance Investigations, is a member of the Compliance Department who is responsible for (a) managing and enhancing the company's privacy program and consulting with various business owners to ensure the company complies with applicable privacy laws and regulations; and (b) managing and conducting internal investigations. This position, working with DSI's Data Privacy Officer, will collaborate with other key stakeholders in implementing policies, procedures, training, and process controls to identify, track, and maintain documentation around privacy requirements and data breaches. Conducts and maintains data mapping of personally identifiable information (PII) for data that flows in and out of the DSI organization as well as PII data that is maintained within DSI. Oversees and maintains necessary technical systems to support the company's adherence to data privacy requirements. Ensures the company maintains compliance with US data privacy laws and commitments for data handling with affiliates situated outside of the US. Managing and advancing the company's data privacy program through ongoing maintenance and development of data process controls, privacy assessments, and consulting with business stakeholders regarding company policies and applicable laws and regulations. This position will research assigned Compliance cases, develop investigative findings, participate and lead investigative interviews, assist with the drafting of Compliance coaching letters/closing reports and maintaining the official Compliance investigative file. The position is also responsible for keeping current records and lists of all opened and closed compliance investigative matters, updating the Compliance Hotline with appropriate responses and assisting with the assignment and scheduling of open compliance matters in accordance with established procedures. This position has responsibility at Daiichi Sankyo, Inc. and its affiliate, American Regent, Inc. for conducting internal investigations. This position requires strong investigative skills, strong technical and data acumen, good interpersonal skills, high integrity, and sound judgment.

Responsibilities

- Privacy

Working in conjunction with DSI’s Privacy Officer to continue developing and maintaining an effective Privacy program to address applicable data protection and privacy laws, utilizing various elements of DSI’s Privacy management program elements (e.g. policies, guideline, standards, tools, procedures, self-help and training resources) to identify and support flows of personally identifiable information.
- Work with stakeholders to conduct privacy impact assessments (PIAs) for new projects, systems, or processes, and identify privacy risks and recommend mitigation strategies.
- Works collaboratively with other key stakeholders in developing and implementing policies, procedures, training, and monitoring to embed privacy considerations into key business processes, as well as identify, respond to, and track privacy and data breaches.
- Proposes modifications and enhancements of the privacy program, based on continued maintenance and upkeep of data maps, as well as monitoring and assessment of evolving privacy laws and regulations.
- Manage and respond to data subject requests (e.g., access, rectification, erasure) in accordance with applicable laws, and coordinate with legal, IT, and customer support teams to address DSRs promptly.
- Serve as a subject matter expert on privacy matters, providing guidance to executives, legal teams, and other stakeholders regarding privacy implications of business initiatives, product development, and marketing campaigns. Review relevant data protection agreements in coordination with Legal and IT.

- Investigations

Effectively manages internal investigations in a prompt and fair manner while maintaining independence, objectivity and discretion in the observation and collection of facts. Conducts document collection, document and information review, interviews and/or other reviews of persons involved in or having knowledge of a particular situation, in accordance with the established protocols.

Ensures closeout reports and/or other documentation of outcome of particular cases including but not limited to investigative logs. Working with the investigative team, this position is responsible for the triage of complaints, research of assigned compliance cases, development of investigative findings, participating and conducting interviews and/or other reviews of persons involved in or having knowledge of a compliance matter, presenting findings to investigation team, proposing corrective actions, and drafting of compliance coaching letters/closing reports.

- Supports Company’s broader Compliance Program including special projects, writing educational and training materials, conducting monitoring, conducting training, drafting and reviewing policies and procedures, etc. Support global compliance initiatives (e.g., global reporting of investigation data, global Privacy initiatives).

Qualifications: Successful candidates will be able to meet the qualifications below with or without a reasonable accommodation.

Education Qualifications (from an accredited college or university)

- Bachelor's Degree required
- JD J.D. from a Law School of recognized standing with State Bar admission required
- Advanced degrees (e.g. LLM) and certifications may be considered as equivalent experience preferred

Experience Qualifications

- 4 or More Years Post-law school experience required
- Comprehensive knowledge of laws and regulations applicable to global pharmaceutical companies, including, U.S. healthcare fraud and abuse laws, anti-corruption laws, such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act (2010), U.S. fraud and abuse and false claims laws, and relevant industry codes on interactions with healthcare professionals required
- 1 or More Years Prior experience on specific business customers within pharmaceutical industry (e.g., IT, Medical Affairs, Sales/Marketing, Managed Markets, Pharmacovigilance, Supply Chain, Compliance, Quality Assurance, pharma-specific litigation issues, promotional brand review, etc.) preferred
- 1 or More Years Relevant experience in compliance and/or privacy preferred
- Pharmaceutical compliance or healthcare industry preferred
- Familiarity in privacy and data-protection regimes in the EU, US, China, and other jurisdictions, including GDPR, CCPA/CPRA, and PIPL. preferred
- Familiarity with e-discovery and cybersecurity principles preferred Licenses and Certifications
- Privacy certifications (e.g. CIPP, CIPM, etc.) preferred

Travel

Ability to travel up to 10% Periodic travel to ARI; travel to sales or off-site meetings, limited global travel

Daiichi Sankyo, Inc. is an equal opportunity/affirmative action employer. Qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.