Senior Data Privacy Manager

Job Description

Senior Data Privacy Manager

Reporting of the Role

This role reports to Head of Legal - Technology, Adtech and Data

Overview of job

Data goes to the heart of what we do, which is why it is important to build and maintain the trust of our listeners, employees and partners.

Data is particularly relevant to our Digital Ad Exchange (DAX) which serves targeted advertising to listeners of Global's and its partners' digital audio streams.

We are looking for a Senior Data Protection Compliance Specialist of circa 5 years experience in data privacy, to join our legal and compliance team in London. The successful candidate will have an in-depth knowledge of, and experience of advising on data protection, ideally in an adtech, digital and/or tech environment and will be:

Advising on:

• data protection issues arising across Global's business which spans radio, podcasts, adtech, outdoor advertising, live music events, competitions and brand promotions;
• new products, features and systems; and
• complex issues relating to profiling of individuals, serving of targeted advertising and data matching.
• Drafting, reviewing and updating internal and external privacy policies and cookies policies.
• Staying up-to-date and advising on changes to the law relating to data protection and regulatory and industry developments.
• Supporting the business on its DPIAs and ROPA.
• Drafting and reviewing data processing agreements and data sharing agreements.
• Supporting data protection compliance across a variety of business areas including HR, Customer Support, Techonolgy & Digital.
• Overseeing a data privacy assistant who is responsible for:
  • the management of data subject requests and all correspondence with the privacy inbox,
  • ICO registrations and renewals,
  • posting of interesting articles about privacy on internal channels, and
  • developing and delivering training to various teams across a business.
• Liaising with relevant internal stakeholders and Global's external DPO.

3 best things about the job

• Being part of a friendly Legal team with exposure to a variety of teams across the business spanning, live music events, radio, podcasts, brand promotions outdoor advertising, adtech, outdoor advertising and competitions.
• We champion your development and networking by offering access to a wide variety of training courses and encouraging you to attend key industry conferences.
• The data protection landscape is constantly changing and Global is always seeking to be at the cutting edge of new technologies. There will always be new and interesting projects to get involved with

Measures of success -

In the first few months, you would have:

• Advised on data privacy issues that are specific to Global's business which spans radio, podcast, adtech, outdoor advertising, live music events and competitions and brand promotions.
• Attended regular meetings and built relationships with Global's external DPO and several key internal stakeholders (e.g. CRM, Customer Support, Commercial (sales team), Information Security, People & Culture departments, etc).
• Identified (and possibly attended) key industry conferences such as the IAPP Data Protection Intensive.
• Developed a compliance roadmap, with a vision for the people, tools and methodology you will use to deliver on that roadmap.
• Built up an understanding of what personal data is processed by the business including how Global's DAX platform works.
• Reviewed and negotiated data processing and data sharing agreements.
• Tackled some interesting and technically challenging issues related to profiling of individuals, targeted advertising and data matching.
• Overseen management of data subject rights requests and data breaches.
• Helped to maintain the Record of Processing Activity (ROPA).

Responsibilities of the role

Leading the data privacy team on:

• data and adtech projects across the business (and any new businesses acquired by Global);
• facilitating data privacy impact assessments between the business and the DPO;
• keeping up-to-date with changes to data protection legislation and any changes to industry frameworks;
• data protection terms within commercial and adtech contracts and advice for the DAX business;
• the management of data breaches;
• all aspects of data privacy compliance, including the ROPA, data subject rights requests and other queries and responding within the statutory timeframes;
• internal data privacy audits by the DPO and co-ordinating remedial actions;
• the delivery of training and guidance to the business at department and company-wide level;
• updates to privacy and cookie policies and guidance as required;
• working with internal stakeholders to evaluate the data protection risks under contracts and advise on due diligence questionnaires, data processing and sharing agreements and international transfers; and
• overseeing ICO registrations, renewals and preparing responses to any communications from the ICO;

What you will need

The ideal candidate:

• Is a Senior Data Protection Compliance Specialist, with circa 5 years experience advising on protection matters ideally in the media, adtech or technology sectors.
• Holds CIPP/E, CIPP/M, CIPP/US or equivalent qualifications. Any additional data protection training is helpful.
• Can identify and remedy complex legal issues with limited assistance from external legal counsel for specialist advice, possessing foresight, intuition, and a confident approach to managing legal risk.
• Is able to provide pragmatic, concise, clear and commercial advice.
• Works in a collaborative way with a variety of stakeholders across the business .
• Can manage their own workload and work independently, with their priorities being set by their manager.
• Has ability to inspire trust and confidence in others and quickly build relationships, gain respect and attention. The ability to challenge in a compelling and tactful manner where necessary.
• Has experience working in a fast-paced and dynamic environment.
• Can deliver engaging data protection training to people with differing levels of data privacy experience.
• Will bring broader perspectives and views through best practice or knowledge.
• Has strong organisational and project management skills.
• Has great attention to detail together with the ability to see the bigger picture.
• Help to maintain an environment where diverse views and experiences are welcomed, contributing to a sense of trust and purpose.
• Live and breathe our Global values and role-model them to other Globallers.
• A genuine passion for data protection and an interest in its application to new technologies such as AI.

Everyone is welcome at Global

Just like our media and entertainment platforms are for everyone, so are our workplaces. We know that we can't possibly serve our diverse audiences without first nurturing and celebrating it in our people and that's why we work hard to create an inclusive culture for everyone. We believe that diversity will set us apart, so no matter what you look like, where you come from or what your favourite radio station is, we want to hear from you.

We will always seek to make appropriate adjustments to the recruitment process and workplace to be fully inclusive to people with different needs and working styles. If you require us to make any reasonable adjustments for you or to disclose a condition, please email