Data Privacy Specialist

About Unilabs
Headquartered in Geneva and part of the A.P. Moller Group, Unilabs is one of Europe’s leading medical diagnostics companies, offering a complete range of laboratory, pathology, genetics, and imaging services to patients across 14 countries. Unilabs invests heavily in technology, equipment, and people – using digital technologies in its state-of-the-art laboratories and imaging institutes – to improve the lives of close to 100 million people every year.

About the Role

You will help run and continuously improve Unilabs’ privacy operating model, partnering with business and technology teams to embed privacy-by-design, manage privacy risk, and ensure compliant processing of personal data across our operations. This is central – group wide role in the Centre of Excellence with focus on French speaking countries.

Key Responsibilities

• Advise stakeholders on GDPR and related local privacy requirements; translate rules into practical, proportionate solutions.
• Maintain and improve core privacy governance: policies, standards, templates, notices, and guidance.
• Own and maintain Records of Processing Activities (RoPA) and the wider processing inventory.
• Lead/coordinate DPIAs/LIAs and ensure privacy-by-design/default in projects, system changes, and AI/automation initiatives where relevant.
• Oversee vendor and international transfer assessments (due diligence/TPRM, TIAs, SCCs/transfer mechanisms) in partnership with Procurement and IT.
• Coordinate and support incident and request handling (DSARs, complaints, personal data breaches), including documentation, reporting, and remediation tracking.
• Monitor, track, and report leading/lagging privacy metrics and key risks; drive remediation plans to closure.
• Build and strengthen privacy culture through training, awareness campaigns, and hands-on coaching.
• Coordinate and enable Local Data Protection Coordinators/Privacy Champions across countries/sites.
• Stay current on regulatory developments and support audits/certifications (e.g., ISO 27001) as needed.
• Support to DPO on strategic and company wide advise
• Responsible to lead data privacy day to day operations in French speaking Unilabs entities, support to handle data breaches, DSSRs, ROPA and other relevant risk assessments and activities with local business owners and legal team

Reporting line & stakeholders

• Reports to: Group Data Protection Officer (solid line).
• Key partners: Group and local Legal, Information Security, IT, Procurement/Sourcing, Local Data Protection Coordinators, and business leadership.

What you bring

• 5–7+ years of practical experience in data protection/privacy, ideally in a regulated environment (e.g., healthcare, life science, finance, tech).
• Hands-on GDPR experience across RoPA, DPIA/LIA, incident handling, DSARs, DPAs and international transfers (TIA/SCCs).
• Experience with privacy tooling (e.g., OneTrust) and building scalable workflows.
• Strong stakeholder management skills; confident advising and influencing across business, IT, security and procurement.
• Analytical and pragmatic approach with excellent prioritisation and follow-through in a fast-paced environment.
• Strong written and spoken English and French; additional local language skills are a plus.
• Relevant degree (e.g., law, compliance, information security, IT) or equivalent experience.
• Experience operating in an international, matrix organisation, previous experience in multinational responsibility

Nice to have

• Exposure to information security frameworks/certifications (e.g., ISO 27001) and working closely with Security teams.
• Privacy/compliance certifications (e.g., CIPP/E, CIPM) or relevant specialised training.

Soft Skills

• Proactive, structured, and outcomes-focused.
• High integrity and sound judgement; comfortable holding the line when needed.
• Collaborative communicator who can simplify complex topics for non-specialists.
• Team player with positive attitude, agile for corporate changes

At Unilabs, we value diversity and foster an inclusive work environment where everyone is welcome, regardless of gender, age, background, disability, or any other condition that could be considered discriminatory or exclusionary.