Data Protection Manager (Privacy) (m/f/d)

Your Responsibilities

This role sits at the intersection of law, business processes, and technology. This is not a purely monitoring role. You will actively shape how data protection works in practice across a global MedTech organization. The focus is privacy as an enabler of scalable, defensible business operations. You will work closely with business functions like, IT, Legal, Risk, and Audit, with full end-to-end responsibility.

• Take ownership of cross-functional processes involving personal data and redesign them into pragmatic, auditable, and business-ready solutions.
• Act as a trusted privacy sparring partner for functions such as HR, Procurement, Sales, Marketing, and IT, providing clear, risk‑based advice on operational and tactical initiatives.
• Drive privacy projects from idea to implementation, including scoping, stakeholder alignment, timelines, and deliverables.
• Identify privacy risks in processes, systems, and products early, assess their relevance, and define proportionate mitigation measures.
• Perform and support privacy assessments, define safeguards, and translate legal requirements into concrete operational controls.
• Negotiate and review contracts with data protection relevance, focusing on feasibility and enforceability rather than theory.
• Contribute to global privacy initiatives and ensure regional implementation aligns with corporate strategy and standards.
• Continuously challenge existing approaches and improve how privacy is embedded into day-to-day business.
• Support ad hoc topics and special projects where legal judgment and structured thinking are required.
• Advise on privacy‑related topics in adjacent areas, in particular employee data protection, cybersecurity‑related data handling, and AI‑enabled processing in regulated environments.
• Coordinate with Information Security, Risk, and IT on privacy‑relevant security and governance measures, ensuring alignment with recognized best practices (e.g., ISO‑based controls where applicable).
• Assess privacy implications of AI‑supported products, analytics, and automation, focusing on lawful use, purpose limitation, and accountability rather than theoretical AI governance.

Your qualification

• Fully qualified law degree (e.g., bar admission or equivalent), completed with clear focus, discipline, and above‑average results.
• Sound, hands‑on understanding of GDPR and related data protection laws, ideally applied in an international or regulated environment.
• Ability to translate abstract legal requirements into workable processes and system controls.
• Solid understanding of digital technologies, data flows, and their role in B2B products and services.
• Experience working in projects, preferably with global stakeholders and competing priorities.
• Structured thinker with strong analytical skills and a bias toward solutions over problem descriptions.
• 3+ years of professional experience in privacy or data protection; experience in MedTech, healthcare, or other regulated industries is a plus.
• High level of confidence working with digital tools and standard office applications.
• Good verbal and written communication skills; excellent German and very good English language skills.
• Reliable, self‑organized, and comfortable taking responsibility rather than waiting for instructions.
• Basic familiarity with adjacent regulatory domains, in particular: employee data protection and works council‑relevant privacy topics, cybersecurity and data‑security‑related legal requirements, privacy implications of AI‑enabled systems.
• Practical exposure to or working knowledge of recognized best practices and frameworks (e.g., ISO 27001 / 27701) is an advantage.
• Ability to operate confidently in interdisciplinary settings with Legal, IT Security, Risk, and Audit.

Your benefits

• Flexible working hours, remote work possible (up to 60%)
• 30 days of holidays per year
• Modern office and an inspiring working environment
• Employee restaurant with live cooking and healthy food (subsidised)
• Public transport ticket (100 % subsidised) or free parking space
• Company sport groups and an inhouse company gym
• Employee Assistance Program to support your health, mental and emotional well‑being
• A comprehensive company pension scheme
• Company medical officer and vaccination offers
• Childcare through our ‘Buttje&Deern’ partner
• Bike leasing

About Olympus

At Olympus, we are committed to our purpose of making people’s lives healthier, safer and more fulfilling. As a global medical technology company, we partner with healthcare professionals to provide best‑in‑class solutions and services for early detection, diagnosis and minimally invasive treatment, aiming to improve patient outcomes by elevating the standard of care in targeted disease states. For more than 100 years, Olympus has pursued a goal of contributing to society by producing products designed with the purpose of delivering optimal outcomes for its customers around the world. For more information, visit and follow our LinkedIn account: linkedin.com/company/OlympusMedEMEA .