Director, International Privacy Lead and Data Protection Officer

Director, International Privacy Lead & Data Protection Officer

Overview

Alnylam is seeking an experienced privacy and data protection leader to serve as Director, International Privacy Lead & Data Protection Officer. Reporting to the Senior Director, Head of Privacy, AI Governance, Training & Communications within Ethics & Compliance, this role will lead Alnylam’s international privacy program, with primary responsibility for Europe (EU/EEA, United Kingdom, and Switzerland) and support for broader international markets.

As Alnylam’s formally appointed Data Protection Officer (DPO) under applicable European and Swiss privacy laws, the Director will provide independent privacy oversight, advise the business on data protection obligations, and maintain direct access and escalation channels to senior leadership for material privacy risks.

This individual contributor will be expected to serve as a proactive partner to the our international business, anticipating privacy and data protection obligations driven by regulatory change and business growth, and translating those requirements into actionable guidance for policies, operations and ways of working.

The successful candidate will partner closely with Legal, Information Security, IT, HR, Commercial, Medical Affairs, Clinical Development, Pharmacovigilance, Procurement, Ethics & Compliance, and other business stakeholders to enable responsible use of personal data while strengthening privacy governance, risk management, and business adoption across international markets.

Hybrid role preferably based in Zug, Switzerland. Also open to candidates based in Madrid, Spain or Maidenhead, UK.

Responsibilities

• Lead and mature Alnylam’s international privacy program, with primary focus on Europe and support for broader international markets, by setting program priorities, strengthening governance frameworks, and ensuring privacy requirements are embedded into business planning, policies, controls, and day-to-day operations. • Serve as Alnylam’s appointed DPO under EU GDPR, UK GDPR, and applicable Swiss data protection requirements, providing independent advice, monitoring compliance, maintaining required independence, and acting as the primary point of contact for supervisory authorities and data subjects. • Oversee privacy risk identification, assessment, mitigation, monitoring, and escalation processes, including privacy-by-design and privacy-by-default requirements, DPIAs, TIAs, Records of Processing Activities (ROPA), cross-border transfer assessments, and related governance documentation. • Advise business and functional leaders on privacy requirements related to clinical research, pharmacovigilance, commercial operations, medical affairs, human resources, patient support programs, real-world evidence, AI, and other data-driven initiatives. • Partner with Information Security, Legal, Procurement, and business stakeholders on privacy incident response, breach assessment, third-party privacy risk management, data protection terms, data sharing arrangements, remediation, and regulatory notification decisions. • Proactively monitor the European and international privacy, AI, digital, cyber and data governance legislative landscape, anticipating compliance impacts from business growth and regulatory change, and rapidly translating new or changing requirements into practical updates to policies, controls, business processes, training, and operational guidance. • Develop and deliver privacy training, communications, awareness initiatives, metrics, monitoring activities, and continuous improvement plans that promote a culture of privacy and accountability across international markets.