🚀 Director / Ceo

Location:
Barcelona, Spain (On-site) / 3 days working from the office or
Gothenburg, Sweden (On-site) / 3 days working from the office
Evinova is a health-tech business, accelerating the delivery of better health outcomes by propelling the life sciences sector forward in digital health, from the inside. Through our application of science-based expertise, evidence-led rigor, and human experience-driven insight, our digital solutions are deliberately designed so that everyone can reach better health outcomes together. Evinova is a health-tech business within the AstraZeneca Group.
Introduction to Role:
The Evinova Director, Data Privacy & Governance provides both strategic oversight to meet Evinova’s privacy responsibilities and practical daily privacy support to meet the demands of Evinova’s growing global healthtech business and expanding customer base as well as be responsible for the Data Governance program emphasising Security, Privacy, and AI.
This role reports directly to the Evinova Head of Quality, Compliance, and Audit, working closely with the Cyber Security, Legal, Product, and Delivery teams.
This role will be the central point of contact for data subjects and supervisory authorities in relevant markets, including in the EU and Switzerland. In addition, this role is responsible for global horizon scanning and providing advice and oversight based upon strong subject matter expertise and manage the relationship with Evinova’s external Data Protection Officer for cases that warrant it. Furthermore this role will help build out and maintain Evinova ISO 27701 controls and Statement of Applicability to obtain and maintain certification and ensure privacy aspects of Evinova customer audits are fully supported and may support privacy aspects of contract negotiations with new customers.
Accountabilities
Evinova representative for data subjects and supervisory authorities:
Point of contact for supervisory authorities related to Evinova data processing activities and data subjects

Maintain required licenses, registrations and other local regulatory requirements to enable compliant processing and