Be part of our team
The Compliance, Enterprise Risk Management and Data Privacy Department supports Tubulis with the following tasks:
Data Privacy:
Serve as the primary point of contact for addressing inquiries to the External DPO.
Develop, implement, and maintain data protection policies across the organization and supporting systems.
Promote and oversee the implementation of recommendations issued by the External DPO.
Support data privacy assessments, reviews, and audits to ensure ongoing compliance.
Healthcare Compliance:
Establishment, implementation, oversight, and continuous enhancement of the Compliance Management System (CMS).
Strategic compliance support to Tubulis’ business operations, including global policy development, compliance risk assessments, and compliance monitoring activities, in close collaboration with the Management Board, C-level executives, department heads, and other relevant functions.
Establishment of compliance governance.
Design, implementation, and oversight of an effective system for raising concerns, including a whistleblowing mechanism, and ensuring reported concerns are appropriately addressed.
Development, implementation, and supervision of a comprehensive compliance training program.
Ongoing compliance monitoring and effectiveness assessments.
Conduct of internal investigations.
Enterprise Risk Management
Managing and overseeing quarterly and ad-hoc risk updates prepared by designated risk owners.
Facilitate risk identification and validation workshops across the organization.
Own and maintain the Enterprise Risk Management (ERM) Policy, ensuring its ongoing relevance and effectiveness.
Assess the effectiveness of risk management processes and ensure compliance with the Tubulis ERM Policy.
Conduct ongoing review and monitoring of ERM activities to support continuous improvement.
Your mission
The Data Privacy and Compliance Manager will:
- Support all department activities listed above, as needed
- Help overseeing the Tubulis’ data privacy framework
- Ensure smooth and timely communication and pragmatic advice to the other departments, addressing their needs and prioritizing tasks in line with company objectives
- Maintain contacts with the external Data Protection Officer
- Support the Data Privacy Impact Assessments, Legitimate Interest Assessments and other processes
- Support multiple technical tasks, such as department budgeting process, documents retention, training records etc.
- Maintaining respective IT systems and access rights
- Serve as a point of contact for routine compliance and data privacy topics
- Supporting the Head of the Department with any other department activities, as needed
Your profile
Must-Have Qualifications:
- Bachelor’s degree in relevant studies
- 3-5 years of experience in data privacy (ROPA, DPIA, etc.) and healthcare compliance areas
- Understanding of Data Privacy (especially GDPR) and Healthcare Compliance regulations
- Fluent German and English
- Strong work ethics and integrity
- Excellent communication skills
- Advanced understanding of Microsoft Office and other IT systems (preferably, experience of implementation of IT systems in these areas)
Nice-to-Have Qualifications:
Why us?
At Tubulis, curiosity and innovation drive us to transform cancer treatment. We are a fast-growing biotech where science meets passion—and where you have the chance to grow with us.
-
Impact that matters: Contribute to breakthrough therapies.
-
Global mindset: Work in an international, diverse team.
-
Grow & thrive: Develop your career in a supportive, fast-moving environment.
-
Innovation every day: Push boundaries with cutting-edge science.
At Tubulis, your ideas matter, your growth matters—and together, we make a difference.
