Senior Privacy Architect — Design & Compliance Lead

At Fresenius Medical Care, we are the global leader in kidney care, committed to improving the lives of patients with chronic kidney disease. Our mission is to deliver high-quality, innovative products, services, and care across the entire healthcare journey. Guided by our vision—“Creating a future worth living. For patients. Worldwide. Every day.”—we work with purpose and compassion, supported by a global team of over 125,000 employees.

Our values guide how we work:

• We Care for our patients, each other, and our communities

• We Connect across teams and borders to deliver excellence together

• We Commit to doing things the right way— growing with purpose and leading kidney care with integrity and innovation

We are seeking for anew team member as (
Senior) Expert – Technical Privacy to ensure that our technology systems, digital products, and data processing workflows are designed and operated in full alignment with GDPR and global privacy regulations. In this role, your primary focus will be the practical implementation of privacy-by-design and privacy-by-default principles across our technology landscape. A deep knowledge of current and upcoming regulatory standards will allow you to enable product teams tobuild future proof products.

You will work closely with engineering, product, legal and security teams to embed privacy into architectures, processes, and system behavior from the scratch. Strong interpersonal skillsare essentialtocommunicate your solution to relevant other stakeholders in our organization.

Your Responsibilities:

• Own and operationalize privacy-by-design and privacy-by-default across all stages of the product development lifecycle from concept and architecture to development, deployment, and maintenance.

• Develop technical frameworks, design patterns, and implement standard and guidelines to ensure systems and applications inherently meet GDPR, HIPAA, EU Data Act, EU AI Act, and related regulatory requirements.

• Build and maintain a robust privacy engineering toolbox
  , including solutions for encryption, pseudonymization, data minimization, access governance, and secure data storage and transfer.

• Work with product owners and architects to translate regulatory requirements into concrete technical designs
  , system requirements, and acceptance criteria.

• Lead privacy impact assessments from a technical design perspective
  , identifying risks and defining mitigating controls.

• Mentor engineering teams on privacy-preserving design principles, coding standards, and architectural best practices.

• Be at the forefront of new regulations and standards to anticipate early requirements for our products.

• Serve as the technical authority for privacy topics
  , supporting audits, compliance assessments, and regulatory inquiries.

• Act as a cross-functional interface for Legal, Security, Quality, Engineering, and business functions to ensure alignment and clear communication.

Your Profile:

• Proven experience in a role such as Privacy-by-Design Architect, Technical Privacy Lead, Privacy Engineer, or Privacy Architect
  .

• Deep, hands-on understanding of privacy-by-design and privacy-by-default
  , with proven experience implementing these principles in real-world systems and cloud environments.

• Strong knowledge of GDPR technical requirements
  , including data minimization, purpose limitation, security of processing, data lifecycle management, and DSR enablement.

• Demonstratedabilitytolearnquickly, graspdailyoperations and deliverables, and adaptto a rapidlyevolvingregulatoryenvironment.

• Expertise in systems architecture
  , cloud platforms, and privacy-enhancing technologies (PETs).

• Experience with compliance frameworks such as ISO/IEC 27001
  , SOC2, or comparable standards.

• Familiarity with tools and systems that support data subject rights
  , consent management, and auditability.

• Certifications such as CIPP/E, CIPT,CIPM, CDPSE, CISSP, CDPO
  or equivalent are a plus.

• Strong analytical, problem-solving, and critical-thinking strengths.

• Excellent communication skills, capable of explaining complex technical privacy concepts to a broad audience.

• Strong interpersonal and negotiationskillsformanaging diverse and challengingopinions.

• Excellent organizational…