Data Privacy and Compliance Manager/Senior Manager (m/f/d)

Data Privacy and Compliance Manager/Senior Manager (m/f/d)

Permanent employee, Full-time · Planegg (Germany)

Be part of our team

The Compliance, Enterprise Risk Management and Data Privacy Department supports Tubulis with the following tasks:

• Data Privacy: Serve as the primary point of contact for addressing inquiries to the External DPO.
• Develop, implement, and maintain data protection policies across the organization.
• Promote and oversee implementation of recommendations issued by the External DPO.
• Support data privacy assessments, reviews, and audits to ensure ongoing compliance.
• Establish, implement, oversee, and continuously enhance the Compliance Management System (CMS).
• Strategic compliance support to business operations, including global policy development, compliance risk assessments, and monitoring activities.
• Establish compliance governance.
• Design and implementation of an effective system for raising concerns, including a whistleblowing mechanism.
• Develop, implement, and supervise a comprehensive compliance training program.
• Conduct internal investigations.
• Managing and overseeing quarterly and ad‑hoc risk updates.
• Facilitate risk identification and validation workshops.
• Own and maintain the Enterprise Risk Management (ERM) Policy.
• Assess effectiveness of risk management processes and ensure compliance with the ERM Policy.

Your mission

The Data Privacy and Compliance Manager will:

• Support all department activities listed above, as needed.
• Help oversee the Tubulis' data privacy framework.
• Ensure smooth and timely communication and pragmatic advice to other departments.
• Maintain contacts with the external Data Protection Officer.
• Support Data Privacy Impact Assessments, Legitimate Interest Assessments and other processes.
• Support multiple technical tasks: budgeting, document retention, training records, etc.
• Maintain respective IT systems and access rights.
• Serve as a point of contact for routine compliance and data privacy topics.
• Support the Head of the Department with any other activities, as needed.

Your profile

Must-Have Qualifications:

• Bachelor's degree in relevant studies.
• 3-5 years of experience in data privacy (ROPA, DPIA, etc.) and healthcare compliance.
• Understanding of GDPR and Healthcare Compliance regulations.
• Fluent German and English.
• Strong work ethics and integrity.
• Excellent communication skills.
• Advanced understanding of Microsoft Office and other IT systems (preferably experience with implementation).

Nice-to-Have Qualifications:

• Legal background.

Why us?

At Tubulis, curiosity and innovation drive us to transform cancer treatment. We are a fast-growing biotech where science meets passion—and where you have the chance to grow with us.

• Impact that matters : Contribute to breakthrough therapies.
• Global mindset : Work in an international, diverse team.
• Grow & thrive : Develop your career in a supportive, fast-moving environment.
• Innovation every day : Push boundaries with cutting-edge science.

At Tubulis, your ideas matter, your growth matters—and together, we make a difference. Tubulis is a clinical stage biotech company that generates uniquely matched antibody‑drug conjugates (ADCs) with superior biophysical properties that have demonstrated durable on‑tumor delivery and long‑lasting anti‑tumor activity in preclinical models. We recently closed on a Series C fundraising round totaling €344M (US $401M). The development of novel, effective and safe therapies for the treatment of cancer is one of the main challenges for modern medicine. We want to drive this process forward. The main goal of Tubulis is to become a leading company in the field of targeted therapeutics and ADCs. With a strong team, our own technologies and innovative therapeutic concepts, we are ushering in a new era in the ongoing fight against cancer and share the vision of helping patients world‑wide. Be part of a multidisciplinary and focused team that works towards getting novel promising ADCs to patients with solid and hematological cancers.