Sr. Manager, Regional Privacy Lead - EMEA

Sr. Manager, Regional Privacy Lead - EMEA

Department:
Legal

Employment Type:

Full Time

Location:

EMEA-Spain

Reporting To:
Nate Hwang

This position is ideal for senior privacy professionals to join the Privacy Office as the Sr. Manager, Regional Privacy Lead - EMEA. The main rule is to operationalize and scale the Privacy Program in EMEA, ensuring compliance with applicable privacy and data protection laws, including GDPR, UK GDPR, ePrivacy requirements, AI-related regulations, and emerging regional privacy legislation. You will partner with the Legal Regulatory and Quality department and business functions.

This role is a strategic, influential role and you will leverage AI and digital automation to deliver process simplification and measurable impact to grow the business the right way.

This position may be based in Wroclaw, Poland or Madrid, Spain. The position will report to the Global Compliance and Privacy Officer, with a functional (dotted-line) reporting relationship to the Director, Global Privacy, Data Governance and AI.

• Lead Regional Privacy Program
  :
  Serve as the lead privacy advisor and primary point of contact for all EMEA privacy matters. Translate global privacy strategy into region-specific implementation plans and operational priorities. Partner with business leaders to identify and proactively address privacy risks while enabling business growth and innovation, and build strong relationships with regional leadership teams and provide practical, risk-based guidance on privacy requirements.
• GDPR and Regulatory Compliance
  :
  Lead the implementation and ongoing maintenance of compliance with GDPR, UK GDPR, ePrivacy requirements, and other applicable EMEA privacy laws. Monitor evolving regulatory developments, enforcement trends, and guidance from supervisory authorities, and advise stakeholders on lawful bases for processing, consent requirements, transparency obligations, retention practices, and individual rights. Support audits, regulatory inquiries, inspections, and privacy-related investigations/inquiries.
• Policies, Procedures and Controls
  :
  Adapt and implement global compliance policies to reflect EMEA’s legal requirements and business operations. Draft supplemental regional SOPs or guidance where needed to address local regulatory needs.
• Privacy-by-Design and Risk Assessments
  :
  Lead and oversee privacy risk assessments, DPIAs, privacy reviews, AI assessments, transfer impact assessments and enterprise privacy reviews for new initiatives, technologies, products, systems, and AI-enabled use cases. Partner with business, security, legal, and technical teams to identify risks and implement appropriate mitigation measures, and champion privacy-by-design and privacy-by-default principles across the organization.
• Data Governance and Accountability
  :
  Lead the regional oversight of Records of Processing Activities (RoPA), accountability documentation, and privacy governance reporting. Advise on cross-border data transfer mechanisms, including SCCs, BCRs, UK transfer requirements, and other international transfer frameworks. Partner with Global Privacy, Security, and Data Governance teams to strengthen accountability and oversight processes.
• Vendor and Third-Party Privacy Risk Management
  :
  Lead or oversee privacy assessments of third-party vendors, service providers, cloud solutions, and strategic business partners,, and assess third-party privacy risks and partner with Procurement, Info Sec, and Legal teams to implement appropriate controls. Provide guidance on data protection provisions in commercial agreements and data processing agreements.
• Customer and Commercial Privacy Support: Act as the primary privacy advisor for customer-related privacy matters…