Director, Privacy (Seattle or Vancouver, BC)

Legal Vancouver, BC


Zymeworks is a clinical-stage biopharmaceutical company dedicated to the discovery, development and commercialization of next-generation bispecific and multifunctional biotherapeutics.  Zymeworks’ suite of complementary therapeutic platforms and its fully-integrated drug development engine provide the flexibility and compatibility to precisely engineer and develop highly-differentiated product candidates.

This position will be located in Vancouver, BC or Seattle, WA and will report to the Vice President, Legal. 

Key Responsibilities

  • Leads the strategic development, long-term direction, and continuous improvement of Zymeworks’ company-wide data privacy program.
  • Executes program initiatives to ensure that the right privacy controls and processes are adopted, implemented, and documented to promote compliance with privacy laws, regulations, policies, and procedures throughout the organization.
  • Serves as the privacy subject matter expert to the organization and provides strategic and practical counsel to internal stakeholders on privacy and data governance principles and requirements.
  • Interfaces with contract research organizations (CRO) privacy representatives, external counsel and external privacy vendors on program development and infrastructure.
  • Acts as an escalation point for negotiation, drafting and review of privacy and data processing contract terms.
  • Conducts privacy impact assessments to identify potential privacy-related risks and gaps in compliance.
  • Establishes best practices in the inventory and mapping of data flows and business processes.
  • Participates in vendor due diligence assessments to evaluate data privacy risk.
  • Provides expertise in the management, investigation and resolution of privacy incidents or complaints, taking a proactive approach to risk remediation and supporting stakeholders in assessing risks and identifying solutions.
  • Monitors relevant privacy and data protection laws and enforcement activities to ensure ongoing compliance, track emerging risks and assist with policy creation and other program materials.
  • Develops, maintains and delivers privacy training, education, communication and awareness materials.
  • Drafts and maintains policies, processes and other documentation (e.g., checklists, guidelines, FAQs) to ensure consistent, relevant and up-to-date guidance is available to stakeholders according to operational needs, current laws, industry trends and emerging best practices.
  • Contributes to the improvement of standard forms of agreements, alternate language playbooks, and internal resource documents with respect to privacy and data processing matters.
  • Participates in special projects and performs other duties as needed.
Education and Experience
  • JD degree and a minimum of 10 years’ related experience, preferably including both law firm and in-house experience supporting privacy functions, or an equivalent combination of education and experience.
  • Expertise in areas of applicable global privacy and data protection laws (including GDPR, PIPEDA, PIPA, and CCPA).
  • Biotechnology/ pharmaceutical industry experience is an asset.
  • Member in good standing of a Canadian or U.S. state bar (depending on location), preferably the British Columbia or Washington State bar, respectively.
  • Completion of an Information Access and/or Protection of Privacy Certificate Program or other related certifications is an asset ( i.e., CIPP/C, CIPT or CIPM).

Skills and Abilities

  • Hands on, practical experience implementing data privacy programs.
  • Demonstrated experience in providing regulatory and policy advice in the areas of data protection and privacy law, particularly within the biotechnology/ pharmaceutical industry.
  • Knowledge of and experience with data security, data breach and data loss prevention processes, tools and statutes.
  • Experience with FDA regulatory issues related to data security and privacy, including government requirements for compliance programs, preferred.
  • Experience in gaining a detailed understanding of how data is gathered, where it resides, how it is used.
  • Able to translate complex rules and regulations into straightforward requirements that are easily understood by stakeholders.
  • Ability to apply critical thinking to program objectives, evaluate and document the tasks needed to achieve objectives, create actionable workplans and oversee to completion.
  • Comfortable proactively interfacing with stakeholders at all levels.
  • Awareness for escalating issues when appropriate.
  • Efficient, focused and pragmatic, offering quality practical legal advice and strategic solutions.
  • Proven interpersonal skills with the ability to work collaboratively as a member of a cross-functional team. Ability to establish and maintain effective working relationships.
  • Strong leadership skills with the proven ability to manage, develop and empower employees.
  • Excellent organizational skills and the ability to manage competing priorities and concurrent deliverables and work effectively in a challenging, milestone-driven environment.
  • Ability to think and act strategically, anticipate roadblocks and map out next steps.
  • Sound business acumen with a practical, results-oriented management style that can translate innovative, creative strategies and conceptual thinking into action plans.
  • Demonstrated high level of integrity and ethics.
  • Extremely strong written and oral communication and presentation skills.


At Zymeworks, we stand for innovation, integrity, collaboration and care.

We come from many countries, cultures, races, ethnicities, abilities and nationalities. We bring our passions including singing, biking, swimming, dancing, cooking, volunteering, parenting, coaching and much more! We are proud of our nearly equal balance of men and women and strengthened by our non-binary and transgender team members. Every employee belongs.

We offer challenging career opportunities, competitive benefits and an environment that recognizes and rewards performance.

NOTE TO EMPLOYMENT AGENCIES: Zymeworks values our relationships with our Recruitment Partners. We will only accept resumes from those partners whom have been contracted by a member of our Human Resources team to collaborate with us. Zymeworks is not responsible for any fees related to resumes that are unsolicited or are received without contract.