Executive Director, Global Privacy & Data Protection

Madrigal is a biopharmaceutical company focused on delivering novel therapeutics for metabolic dysfunction-associated steatohepatitis (MASH), a serious liver disease that can progress to cirrhosis, liver failure, need for liver transplantation and premature mortality. Every member of our Madrigal team is connected by our shared purpose: leading the fight against MASH.

Madrigal’s medication, Rezdiffra (resmetirom), is a once-daily, oral, liver-directed THR-β agonist designed to target key underlying causes of MASH. Rezdiffra is the first and only medication approved by both the FDA and European Commission for the treatment of MASH with moderate to advanced fibrosis (F2 to F3). An ongoing Phase 3 outcomes trial is evaluating Rezdiffra for the treatment of compensated MASH cirrhosis (F4c).

Our success is driven by our people. We are building a dynamic, inclusive, and high-performing culture that values scientific excellence, operational rigor, and collaboration. To support our continued growth, we are strengthening our workforce strategy to ensure we have the right talent, at the right time, in the right way.

We are seeking an experienced and business-minded Privacy & Data Protection attorney to lead and support our global privacy, data protection, and AI initiatives. This role will play a critical part in ensuring compliance with global and U.S. privacy laws while advising on the responsible use of data, emerging technologies, and artificial intelligence.

The ideal candidate combines legal expertise with practical experience in privacy, data governance, cybersecurity, IT systems, and AI-driven products or services. The ideal candidate will demonstrate sound judgment, discretion, and an ability to operate independently in a dynamic, fast-paced, international workforce.

Key Responsibilities

• Provide legal advice on international and U.S. privacy laws, including but not limited to consumer data protection, employee data, and marketing practices
• Lead compliance efforts related to U.S. laws such as CCPA/CPRA, HIPAA, and other laws and privacy/data security frameworks
• Partner closely with IT, Security, Product, and Data teams to ensure privacy-by-design and security-by-design principles are embedded into systems and workflows
• Advise on legal and regulatory considerations related to artificial intelligence, including data usage, model training, automated decision-making, and bias mitigation
• Draft, review, and negotiate privacy-related agreements, including data processing agreements (DPAs), vendor contracts, and cross-border data transfer mechanisms
• Develop, implement, and maintain privacy policies, training, notices, and internal governance frameworks
• Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs)
• Monitor and interpret new and emerging privacy, cybersecurity, and AI regulations, and translate them into actionable business guidance
• Support response efforts related to potential data breach incidents and  cybersecurity events
• Provide training and awareness programs for internal stakeholders on privacy and data protection best practices
• Perform other duties and responsibilities as may be required

Qualifications

Required:

• Juris Doctor (JD) from an accredited U.S. law school
• Active bar membership in at least one U.S. jurisdiction
• 12+ years of relevant experience in privacy, data protection, or technology law (law firm and/or in-house)
• Strong knowledge of global and U.S. privacy laws and regulatory frameworks
• Experience advising on IT systems, data architecture, and cybersecurity practices
• Familiarity with AI technologies and associated legal and ethical considerations
• Proven ability to work cross-functionally with technical and business teams
• Excellent drafting, negotiation, and communication skills

Preferred:

• Prior in-house experience at a publicly traded pharmaceutical or health care company
• Background in technology, computer science, or information systems (or equivalent practical experience)
• Familiarity with AI governance frameworks and emerging regulations

Key Competencies

• Analytical and strategic thinker with strong problem-solving abilities
• Ability to balance legal risk with business objectives
• Highest level of integrity and professionalism
• Adaptability in a rapidly evolving regulatory and technological landscape
• Strong project management and organizational skills

This position may be hybrid or remote.

Madrigal’s Total Rewards strategy is based on a biotech industry peer group comparator and is inclusive of base pay, bonus and equity. Our equity offers meaningful opportunity allowing our employees to share in the success they help create. By aligning individual and company performance, we empower employees to think like owners, giving them a stake in the organization.

All employees receive equity, which we believe reinforces our ownership culture. Base salary is determined by several factors including the candidate’s qualifications, skills, education, experience, business needs and market demands.  As of the date of this posting, a good faith estimate of the current pay scale for this position, applicable to all candidates, is $313000-$360000 per year.  We comply with all applicable minimum wage laws.

All full-time employees receive equity, which reinforces our ownership culture and offers meaningful opportunity for our employees to share in the success they help create. By aligning individual and company performance, we empower employees to think like owners, giving them a stake in the organization.  

Full-time employees are also eligible for comprehensive benefits, including flexible paid time off, medical, dental, vision and life/disability insurance, and 401(k) offerings (i.e., traditional, Roth, and employer match) in accordance with applicable plans. We also offer additional voluntary benefits like supplemental life insurance, legal services, and other offerings. In addition, we offer mental health benefits through our Employee Assistance Program for employees and their family. The company also provides other benefits in accordance with applicable federal, state, and local laws. 

We are committed to providing reasonable accommodations for individuals with disabilities throughout the hiring process. If you need assistance, please contact [email protected]. 

Madrigal is an Equal Opportunity Employer. All employment is decided on the basis of qualifications, merit, and business need. Applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex gender identity, sexual orientation, national origin, age, disability, protected veteran or disabled status, or other characteristic protected by applicable federal, state, or local law. 

Unsolicited resumes from agencies should not be forwarded to Madrigal. Madrigal will not be responsible for any fees arising from the use of resumes through this source. Madrigal will only pay a fee to agencies if a formal agreement between Madrigal and the agency has been established. 

Applications are being accepted on an ongoing basis and can be submitted through our Madrigal Careers site. 

Please be aware that we have received reports of individuals misrepresenting themselves as Madrigal Pharmaceuticals’ Hiring Managers, seeking to engage with job candidates through fraudulent online advertisements or job posting sites. These unauthorized individuals are using Madrigal’s name and logo in an attempt to solicit up-front fees and obtain personal information from interested job candidates. Please know that Madrigal does not conduct interviews via text or in chat rooms; conduct interviews via Skype, RingCentral or solely via telephone; charge candidates an advance fee of any kind (e.g., fees for purchasing equipment); nor does it offer positions of employment without undergoing a thorough recruiting process.  

Please also note that any correspondence with regard to employment would come from an authorized madrigalpharma.com email address or from an email address from one of our trusted search firm partners. We are aware that incorrect/fraudulent email addresses, with Madrigal misspelled, have been utilized in these most recent fraud attempts. If you receive unsolicited employment offers from people claiming to work for or on behalf of Madrigal, we recommend that you: do not respond to their questions; do not open any attachments; and do not click on any hyperlinks. Any questions regarding the legitimacy of job-related contacts can be directed to [email protected].