Global Privacy

Revolution Medicines is a global, commercial-state oncology company dedicated to discovering, developing and delivering innovative medicines for patients with RAS-addicted cancers. Leveraging its differentiated RAS(ON) tri-complex inhibitor platform, the company is advancing a broad, integrated portfolio of oral RAS(ON) inhibitors designed to directly target the active, cancer-driving state of RAS. Founded on rigorous scientific inquiry and a willingness to challenge long-held assumptions, Revolution Medicines is committed to changing the trajectory of disease for patients with RAS-addicted cancers worldwide.

Our people are united by a shared way of working: follow the science, challenge assumptions, act with urgency and hold ourselves to a high standard of rigor—all in service of patients.

The Opportunity:

RevMed is seeking an experienced privacy executive to support RevMed's business.  The Vice President, Global Privacy will lead the strategy, development, and execution of the company's Privacy Program, ensuring all activities are conducted ethically and in accordance with applicable laws, regulations, and industry codes. This attorney will be instrumental in shaping and sustaining a culture of integrity as the company advances and commercializes its oncology pipeline.

The Vice President, Global Privacy is an enterprise leader and the company's Head of Global Privacy, responsible for driving the organization's global privacy strategy, governance, and compliance framework. This role ensures that all business activities involving personal data are conducted ethically and in compliance with applicable international laws, regulations, and industry standards.

Reporting to the Vice President, Compliance, this role serves as a key member of the Legal and Compliance leadership team and advisor to other senior executives on global privacy, data protection, and responsible data use, while fostering a culture of privacy-by-design across all business functions worldwide.

Key responsibilities include:

Strategic Leadership & Governance

• Lead the development and execution of a comprehensive global privacy strategy aligned with business objectives and the broader compliance program.

• Serve as a senior advisor to the General Counsel (GC) and other senior executives on global privacy risks, regulatory developments, and data governance.

• Establish and maintain enterprise-wide global privacy governance frameworks, policies, and standards.

• Set the enterprise privacy vision, roadmap, budget, and multi-year priorities to support RevMed's global growth, clinical development, and commercialization strategy.

• Establish regional privacy governance, escalation paths, and privacy champion networks to ensure consistent execution and accountability across geographies.

• Advise executive leadership on strategic data initiatives, including global data use, digital capabilities, AI/ML governance, and cross-border data strategy.

• Build, scale, and lead the global privacy function across all regions in which Revolution Medicines operates, including the operating model, regional coverage, resourcing plan, and talent strategy.

• Provide regular updates to the General Counsel and other senior executives on global privacy program performance, risks, and mitigation strategies.

Global Privacy Program Management

• Design, implement, and continuously enhance a global privacy program aligned with international laws and best practices.

• Build out and manage Revolution Medicines Global Privacy department.

• Ensure alignment of the privacy program with the company's overall compliance framework and enterprise risk management approach.

• Ensure compliance with global privacy and data protection regulations, including GDPR, UK GDPR, HIPAA, CCPA/CPRA, and other applicable international and local laws.

• Oversee Data Privacy Impact Assessments (DPIAs), cross-border data transfer mechanisms, and global risk assessments.

• Monitor and report on privacy metrics, trends, and program effectiveness across regions.

Clinical and Commercialization Data-Driven Activities

• Serve as the primary privacy lead for all clinical trial-related activities, including data collected from clinical sites, investigators, and patients.

• Partner with R&D and clinical teams to ensure compliant handling of sensitive clinical and health data.

• Collaborate with Commercialization teams to advise on processes, controls, and risks related to data-driven activities, including analytics, digital initiatives, and commercialization strategies.

Operational Integration

• Embed privacy-by-design and privacy-by-default principles into systems, products, and business processes globally.

• Partner cross-functionally with Compliance, Legal, IT Security, R&D, HR, and Commercial teams across regions.

• Support global initiatives involving sensitive data, including clinical, digital, and analytics-driven programs.

• Work closely with HR and Information Security (IS) to address employee and internal data privacy matters, including monitoring, investigations, and governance of workforce data.

Risk Management, Investigations & Incident Response

• Lead or oversee global privacy incident response, including breach assessment, notification, and remediation across jurisdictions.

• Lead and/or oversee privacy-related investigations, including internal reviews and regulatory-driven inquiries.

• Collaborate with Compliance and Information Security to ensure consistent global controls and preparedness.

• Identify, assess, and mitigate global privacy risks in alignment with enterprise risk management priorities. 

Regulatory & External Engagement, Third-party & Contractual Oversight

• Serve as a key point of contact for global data protection authorities and regulators, in coordination with Compliance and Legal.

• Support global regulatory inquiries, audits, and inspections related to privacy.

• Oversee global privacy due diligence and risk management for third-party vendors and partners.

• Own and maintain privacy-related standards across the organization, including templates and playbooks.

• Review, negotiate, or oversee negotiation of privacy and data protection terms in contracts, including data processing agreements (DPAs), standard contractual clauses (SCCs), and related provisions.

• Ensure consistent and appropriate privacy language across all contractual forms and third-party engagements.

Training, Culture & Awareness

• Develop and deliver global privacy training and awareness programs aligned with compliance initiatives.

• Promote a culture of privacy, ethics, and accountability across all geographies.

• Partner with Compliance to integrate privacy into Code of Conduct, global policies, and enterprise training programs.

Required Skills, Experience and Education:

• Juris Doctor (JD); active bar membership a plus.

• Privacy certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT).

• 18+ years of experience in privacy, data protection, legal, compliance, or risk management, including senior leadership accountability for global programs.

• Significant experience building, scaling, and leading global privacy programs and teams in multi-jurisdictional environments.

• Experience in regulated industries (e.g., biotech, pharmaceutical, healthcare, or technology) preferred.

• Deep knowledge of global privacy regulations and frameworks (e.g., GDPR, UK GDPR, HIPAA, CCPA/CPRA, and other international laws).

• Experience with cross-border data transfers, data localization requirements, and global data governance.

• Strong understanding of privacy risk assessments, data lifecycle management, and compliance program integration.

• Familiarity with emerging areas such as AI/ML governance, digital health, and global data strategy.

• Ability to influence the executive team and senior leadership and drive global, cross-functional initiatives.

• Strong strategic thinking with practical, business-oriented judgment.

• Excellent communication and stakeholder management skills across diverse geographies.

• Proven ability to build and lead high-performing teams and operate effectively in a matrixed, global organization.

• Strong organizational and project management capabilities.

#LI-Hybrid  #LI-YG1

The base pay salary range for this full-time position for candidates working onsite at our headquarters in Redwood City, CA is listed below. The range displayed on each job posting is intended to be the base pay salary range for an individual working onsite in Redwood City and will be adjusted for the local market a candidate is based in. Our base pay salary ranges are determined by role, level, and location. Individual base pay salary is determined by multiple factors, including job-related skills, experience, market dynamics, and relevant education or training.

Please note that base pay salary range is one part of the overall total rewards program at RevMed, which includes competitive cash compensation, robust equity awards, strong benefits, and significant learning and development opportunities.

Revolution Medicines is an equal opportunity employer and prohibits unlawful discrimination based on race, color, religion, gender, sexual orientation, gender identity/expression, national origin/ancestry, age, disability, marital status, medical condition, and veteran status.

Revolution Medicines takes protection and security of personal data very seriously and respects your right to privacy while using our website and when contacting us by email or phone. We will only collect, process and use any personal data that you provide to us in accordance with our CCPA Notice and Privacy Policy. For additional information, please contact privacy@revmed.com.

Base Pay Salary Range$311,000—$357,000 USD

We are aware of recent recruitment scams in which individuals or organizations falsely represent themselves as being affiliated with Revolution Medicines. These scams may appear as false job advertisements or unsolicited contacts through communication or chat platforms, email, phone, or text message.
 
Please note that Revolution Medicines does not extend unsolicited employment offers and will never ask candidates to provide financial information, purchase equipment, or pay fees as part of the hiring process. All legitimate communication from Revolution Medicines will come from an official @revmed.com email address.
 
If you believe you’ve been contacted by someone impersonating a Revolution Medicines recruiter, please report it to careers@revmed.com so we can share these impersonations with our IT team for tracking and awareness.