Associate Director- Compliance

GCL: F

Introduction to role:

Are you ready to shape how a digitally powered, science-led organisation keeps its promises on ethics, privacy and responsible AI? Could you turn complex, fast-moving regulatory and technology risk into clear, actionable guidance for leaders and teams?

In this pivotal role, you will be the primary compliance advisor to site leadership, embedding integrity and privacy-by-design into how we build and run technology. You will ensure the Chennai site operates to world-class standards aligned with our global strategy, while also serving as the first point of contact for the Bangalore hub. Your work will safeguard patients, protect data, and enable teams to innovate with confidence.

• Site Compliance Leadership: Serve as the primary contact and internal expert for site compliance matters in Chennai, with support to Bangalore; manage external reporting to regulatory and law enforcement agencies when required.
• Senior Leader Engagement: Influence and coach senior leaders across Chennai and Bangalore to embed compliance expectations into strategy, operations and decision-making.
• Programme Design and Delivery: Ensure effective compliance programmes exist across all relevant policy areas; design and implement policies, processes, training and support that measurably improve behaviours and outcomes.
• Risk Management and Prioritisation: Identify, assess and prioritise the most material compliance risks across sites; direct resources to the highest-impact actions.
• Assurance, Reporting and Audits: Partner with the local Assurance function to implement robust reporting, monitoring and auditing; track effectiveness and close gaps with clear owners and timelines.
• Investigations and Disciplinary Process: Identify matters requiring follow-up or investigation; conduct or refer investigations as appropriate and partner with HR on consistent, fair disciplinary actions.
• Training and Culture: Drive efficient rollout and tracking of centrally driven required training; lead the local Compliance Champion network and act as an ambassador for compliance across the site.
• Cross-Functional Collaboration: Collaborate with HR, Finance, Procurement and other second-line functions on programme build and implementation to simplify compliance for teams.
• Data Privacy Stewardship: Serve as the local point of contact for data privacy; in collaboration with the India ddpo and global privacy guides, provide first-line advisory support and decision gmentorship
• Privacy by Build in Technology: Conduct and support Data Protection Impact Assessments for new technology initiatives, system implementations, data migrations, and deployments involving artificial intelligence and machine learning; maintain Records of Processing Activities for site technology functions.
• Global Alignment: Partner with the Global Privacy Office/DPO to align local practices with global privacy strategy and standards.
• Third-Party and Cloud Risk: Provide privacy input into vendor and third-party assessments for technology suppliers, cloud providers and AI/ML service partners.
• Digital Legal Risk Advisory: Advise IT leadership on cyber security laws, data localisation requirements and AI governance obligations; ensure teams seek advice on sanctions, export controls and jurisdictional restrictions relevant to AI deployment and technological applications.
• Support the AI oversight function by assessing high-risk or novel AI use cases. Advise on fairness, transparency, explain-ability, and human oversight as they relate to privacy and compliance.
• Committee Liaison: Act as the site-level liaison to the Digital Risk & Oversight Committee and the AI Governance Committee; advance issues and foster back decisions to local teams to drive consistent execution.

• Academic degree (Law, Business, Technology, or related field)
• 7+ years' experience in compliance, data privacy, or legal roles — with demonstrable expertise in at least one of: data protection law, corporate compliance, or digital/technology risk
• Experience and understanding of compliance issues in the biopharmaceutical, healthcare, or technology industry, or an industry for which compliance is critical
• Demonstrated efficiency operating in sophisticated organisational and regulatory environments — comfortable navigating matrix structures and multiple reporting lines
• Strong advocacy skills and sound business judgment — able to translate legal/regulatory requirements into practical business mentorship
• Demonstrated ability to partner effectively with technology leaders, data scientists, and engineering teams on sophisticated privacy and compliance issues
• Shown project management skills — ability to frame and build a site plan, identify resourcing requirements, and measure success
• Strong problem-solving skills — able to assess novel situations (particularly at the intersection of AI, privacy, and compliance) and provide pragmatic advice
• Strong networker — internally and externally; able to build trust and influence without direct authority

• CIPP/E, CIPP/A, CIPM, or equivalent privacy certification desirable
• Working knowledge of data protection regulations — particularly GDPR and India's DPDP Act; ability to apply privacy principles to technology and data-driven environments desirable
• Biopharmaceutical or other regulated proven experience helpful
• Strong commercial skills, possibly legally qualified (admitted lawyer or equivalent)
• Experience with India's regulatory landscape — IT Act, CERT-In, DPDP Act, and emerging digital regulations
• Understanding of sanctions and export control frameworks as they apply to technology deployment (desirable, not essential)

When we put unexpected teams in the same room, we fuel ambitious thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible. We balance the expectation of being in the office while respecting individual flexibility. Join us in our unique and bold world.

Why AstraZeneca:

Join a global, science-led biopharmaceutical company where digital, data and technology amplify the speed and scale of impact for patients. Here, unexpected teams gather together within a shared space—engineers, privacy specialists, clinicians and product leaders—unleashing bold thinking that accelerates safe, ethical innovation. You will have the tools, investment and collaborative culture to turn sophisticated risk into clear advantage, crafting how breakthrough medicines and platforms reach patients sooner. We value patience alongside ambition, back curiosity with learning, and connect individual ownership to a purpose that transforms lives.

Lead the standard for ethical, privacy-by-design technology across Chennai and Bangalore—take the next step today and shape how innovation safely reaches patients worldwide!

Date Posted

Closing Date

AstraZeneca embraces diversity and equality of opportunity.  We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills.  We believe that the more inclusive we are, the better our work will be.  We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics.  We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.