About the Role
We are seeking a (Senior) Expert – Technical Privacy to ensure our technology systems, digital products, and data processing workflows align with GDPR and global privacy regulations. Your primary focus will be implementing privacy-by-design and privacy-by-default principles across our technology landscape, enabling product teams to build future-proof products by understanding regulatory standards. You will collaborate with engineering, product, legal, and security teams to embed privacy into architectures, processes, and system behavior from the outset.
Responsibilities
- Own and operationalize privacy-by-design and privacy-by-default across all stages of the product development lifecycle.
- Develop technical frameworks, design patterns, and implement standards and guidelines to meet GDPR, HIPAA, EU Data Act, EU AI Act, and related regulatory requirements.
- Build and maintain a privacy engineering toolbox, including solutions for encryption, pseudonymization, data minimization, access governance, and secure data storage and transfer.
- Translate regulatory requirements into concrete technical designs, system requirements, and acceptance criteria with product owners and architects.
- Lead privacy impact assessments from a technical design perspective, identifying risks and defining mitigating controls.
- Mentor engineering teams on privacy-preserving design principles, coding standards, and architectural best practices.
- Anticipate early requirements for our products by staying at the forefront of new regulations and standards.
- Serve as the technical authority for privacy topics, supporting audits, compliance assessments, and regulatory inquiries.
- Act as a cross-functional interface for Legal, Security, Quality, Engineering, and business functions to ensure alignment and clear communication.
Requirements
- Proven experience in a role such as Privacy-by-Design Architect, Technical Privacy Lead, Privacy Engineer, or Privacy Architect.
- Deep, hands-on understanding of privacy-by-design and privacy-by-default, with proven experience implementing these principles in real-world systems and cloud environments.
- Strong knowledge of GDPR technical requirements, including data minimization, purpose limitation, security of processing, data lifecycle management, and DSR enablement.
- Demonstrated ability to learn quickly, grasp daily operations and deliverables, and adapt to a rapidly evolving regulatory environment.
- Expertise in systems architecture, cloud platforms, and privacy-enhancing technologies (PETs).
- Experience with compliance frameworks such as ISO/IEC 27001, SOC2, or comparable standards.
- Familiarity with tools and systems that support data subject rights, consent management, and auditability.
- Strong analytical, problem-solving, and critical-thinking strengths.
- Excellent communication skills, capable of explaining complex technical privacy concepts to a broad audience.
- Strong interpersonal and negotiation skills for managing diverse and challenging opinions.
- Excellent organizational skills and the ability to operate effectively in ambiguous environments while taking initiative and owning responsibilities.
Skills
- Privacy-by-Design
- Privacy-by-Default
- GDPR
- HIPAA
- EU Data Act
- EU AI Act
- Encryption
- Pseudonymization
- Data Minimization
- Access Governance
- Secure Data Storage
- Secure Data Transfer
- Systems Architecture
- Cloud Platforms
- Privacy-Enhancing Technologies (PETs)
- ISO/IEC 27001
- SOC2
- Data Subject Rights Management
- Consent Management
- Auditability
- Communication Skills
- Interpersonal Skills
- Negotiation Skills
- Organizational Skills
- Problem-Solving
- Critical-Thinking
Location
- Global
Work Type
- Full-time
Experience Level
- Senior
Education Level
- Certifications such as CIPP/E, CIPT, CIPM, CDPSE, CISSP, CDPO or equivalent are a plus.
Benefits
- Individual opportunities for self-determined career planning and professional development
- A corporate culture in which there is enough room for innovative thinking
- A large number of committed people with a wide range of skills, talents and experience
- The benefits of a successful global corporation with the collegial culture of a medium-sized company
About the Company
- At Fresenius Medical Care, we are the global leader in kidney care, committed to improving the lives of patients with chronic kidney disease.
- Our mission is to deliver high-quality, innovative products, services, and care across the entire healthcare journey.
- Guided by our vision—“Creating a future worth living. For patients. Worldwide. Every day.”—we work with purpose and compassion, supported by a global team of over 125,000 employees.
- Creating a future worth living. For patients. Worldwide. Every day.
- Fresenius Medical Care is the world's leading provider of products and services for individuals with kidney disease of which approximately 4.5 million patients worldwide regularly undergo dialysis treatment.
- United by a shared purpose of creating a future worth living for chronically and critically ill people, we care for around 292,000 dialysis patients around the globe.
- In addition, we operate around 35 global production sites to provide products such as dialysis machines, dialyzers, and related disposables.
- We aim to continuously improve our patients’ quality of life by offering them high-quality products as well as innovative technologies and treatment concepts.
