Data Privacy Partner

About the Company

Responsibilities

• ● Data Privacy (primary)
• ● Act as the local Data Privacy Subject Matter Expert for Turkey, ensuring compliance with local data protection laws and AstraZeneca's Global Data Privacy Standard, policies, and procedures.
• ● Maintain the Record of Processing Activities (ROPA) and guide process owners to keep it up-to date; monitor legal changes and enforcement practices, and work with process owners and subject matter experts to update documents (including contract templates), policies, and processes.
• ● Act as the local Data Privacy Officer and as the official Contact Person for AstraZeneca entities registered before VERBIS
• ● Advise the Senior Leadership Team on data privacy requirements to ensure compliance with applicable local data privacy regulations.
• ● Lead and support the response to incidents and data breaches, including containment, remediation follow-up, root cause analysis and notification to the local data protection authority where required.
• ● Support business initiatives by reviewing Privacy Impact Assessments, with particular focus on high-risk projects such as Transform Care, Patient Assistance Programs, and projects involving digital tools and AI.
• ● Implement and oversee consent management, privacy notices, and Data Subject Requests (DSR) processes; ensure end-to-end DSR management and timely responses through local and global coordination, where required.
• ● Engage with the Global Privacy Office on data privacy topics, providing local insight and implementing global initiatives and recommendations.
• ● Embed Privacy by Design and Privacy by Default into processes; partner with Legal, Commercial Excellence, HR, and Digital/IT to clarify roles and accountabilities and drive compliant practices.
• ● Design, deliver and track regular training for employees on data privacy topics, ensuring records are current at least annually and during induction for new joiners.
• ● Raise awareness of risks related to data privacy, particularly around sensitive personal data, including medical data, across the organization.
• ● Conduct effective local Data Privacy assurance process that includes privacy risk identification and assessment, the development of local SOPs and controls
• ● Monitor local data privacy legislative and regulatory changes and escalate to Global Data Privacy Office any changes that impact global or regional processes and system. Essential Skills/Experience
• ● Bachelor's degree in law.
• ● + years of experience in data privacy
• ● Strong knowledge of data protection principles and Law on the Protection of Personal Data No. 6698
• ● Knowledge of GDPR or other relevant global data protection frameworks.
• ● Able to work in a flexible team environment and handle multiple assignments simultaneously.
• ● Strong verbal and written communication skills with fluency in English. Desirable Skills/Experience