Regional Privacy Counsel - APAC

Working with Us

Challenging. Meaningful. Life-changing. Those aren’t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You’ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams. Take your career farther than you thought possible.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us.

Position Summary

Bristol Myers Squibb is seeking an experienced and strategic Regional Privacy Counsel for the Asia-Pacific (APAC) region to join our Global Privacy Law & Compliance team. This role is critical in ensuring BMS' data privacy and protection practices comply with the diverse and evolving regulatory landscape across APAC jurisdictions, while enabling the business to innovate and operate efficiently. The Regional Privacy Counsel will serve as the primary legal advisor on all privacy matters affecting BMS' APAC operations, working cross-functionally with business units including Commercial, Medical Affairs, IT, and HR.

Key Responsibilities

• APAC Privacy Legal Advisor. Serve as the subject matter expert on data privacy laws across APAC jurisdictions, including China (PIPL, CSL, DSL), Japan (APPI), South Korea (PIPA), India (DPDPA), Singapore (PDPA), Australia (Privacy Act/APPs), New Zealand (Privacy Act 2020), Hong Kong (PDPO), and Southeast Asia (Thailand, Philippines, Malaysia, Indonesia, Vietnam, Taiwan, etc.)

• Business Stakeholder Advisory. Advise business partners on privacy risks and legal obligations associated with new and existing initiatives across the region.

• Compliance Program Advice. Work with Director, Global Privacy Compliance to ensure accurate and actionable regional privacy compliance program in alignment with global privacy standards and policies.

• Privacy Impact Assessments. Conduct PIAs and DPIAs for APAC-specific initiatives and maintain records of processing activities (RoPA) for APAC entities.

• Regulatory Monitoring. Track regulatory developments across APAC and ensure timely updates to internal policies, procedures, and controls.

• Cross-Border Data Transfers. Advise on applicable transfer mechanisms and review/negotiate DPAs, vendor contracts, and data sharing arrangements with APAC partners.

• Training & Awareness. Develop and deliver region-specific privacy training programs for APAC employees, contractors, and third parties; foster a culture of privacy accountability.

• Incident Response. Support, as needed, APAC privacy incident triage, investigation, notification, and remediation efforts in coordination with IT department along.

Qualifications

• Education: Law degree (LLB, JD, or equivalent); license to practice law in at least one APAC jurisdiction.
• Experience: Minimum 7–10 years of legal experience, with at least 5 years focused on data privacy and protection law in the APAC region.
• Deep expertise in at least three or more APAC data privacy regimes (e.g., PIPL, APPI, PIPA, PDPA, DPDPA).
• Demonstrated experience advising on cross-border data transfer mechanisms and international privacy frameworks.
• Prior experience in the life sciences, pharmaceutical, or healthcare sector strongly preferred.
• Proven ability to navigate complex, multi-jurisdictional privacy issues with business pragmatism.
• Strong negotiation skills for data processing and vendor agreements.
• Excellent communication skills in English; proficiency in at least one additional APAC language (Mandarin, Japanese, or Korean) highly desirable.

If you come across a role that intrigues you but doesn’t perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career.

Uniquely Interesting Work, Life-changing Careers

With a single vision as inspiring as “Transforming patients’ lives through science™ ”, every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in a supportive culture, promoting global participation in clinical trials, while our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

On-site Protocol

BMS has an occupancy structure that determines where an employee is required to conduct their work. This structure includes site-essential, site-by-design, field-based and remote-by-design jobs. The occupancy type that you are assigned is determined by the nature and responsibilities of your role:

Site-essential roles require 100% of shifts onsite at your assigned facility. Site-by-design roles may be eligible for a hybrid work model with at least 50% onsite at your assigned facility. For these roles, onsite presence is considered an essential job function and is critical to collaboration, innovation, productivity, and a positive Company culture. For field-based and remote-by-design roles the ability to physically travel to visit customers, patients or business partners and to attend meetings on behalf of BMS as directed is an essential job function.

Supporting People with Disabilities

BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to [email protected]. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

Candidate Rights

BMS will consider for employment qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.

If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers.bms.com/california-residents/

Data Protection

We will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at https://careers.bms.com/fraud-protection.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.

If you believe that the job posting is missing information required by local law or incorrect in any way, please contact BMS at [email protected]. Please provide the Job Title and Requisition number so we can review. Communications related to your application should not be sent to this email and you will not receive a response. Inquiries related to the status of your application should be directed to Chat with Ripley.

R1605226 : Regional Privacy Counsel - APAC