Senior Manager, Data Privacy
Listed on 2026-03-05
-
Law/Legal
Regulatory Compliance Specialist
Wella Company is one of the world’s leading professional and retail hair companies. It is a beauty collective with a mission to enable consumers to look & feel like their true self. Its love brands, which include beauty icons such as Wella, Clairol, OPI, and ghd (all together Wella Company), are co‑created by & designed for the beauty junkies of today & tomorrow.
Wella Company and its brands are & will remain committed to a range of social causes as well as seeking to minimize its impact on the environment. For additional information about Wella Company please visit
This role is for an experienced privacy professional to provide direct, day‑to‑day management of data privacy risk for Wella Company across the USA and the Americas, whilst supporting the Global Data Privacy Officer in maintaining and enhancing Wella Company’s Global Data Privacy Compliance Program.
This is a full‑time role reporting to the Global Data Privacy Officer.
- Supporting the Global Data Privacy Officer to maintain and enhance the Global Data Privacy Compliance Program, including drafting, maintaining, and communicating policies, standards, and processes related to Wella Company’s privacy practices.
- Overseeing the creation, completion, and maintenance of documentation to demonstrate compliance and/or accountability, such as a record of personal data processing activities, registrations with regulators, transfer mechanisms for cross‑border data flows, data protection/privacy impact assessments, and appropriate transparency/disclosure notices.
- Raising awareness and delivering training to stakeholders at all levels, designing and rolling out data privacy training, and maintaining and developing Wella Company’s Privacy Hub.
- Driving a “Privacy by Design” culture across Wella Company to embed privacy considerations into operational processes and guide the minimization of operational privacy risks.
- Assisting Wella Company to comply with consent management and data subject rights under applicable laws, including providing advice on rights, coordinating with teams, reviewing responses, and monitoring compliance.
- Monitoring and reporting on data privacy compliance, carrying out risk assessments and gap analysis exercises, identifying shortcomings, advising on risk, and making recommendations for remediation.
- Acting as a point of escalation for data incidents, supporting the investigation and management of incidents, and advising on breach reporting requirements.
- Supporting Wella Company’s interactions with privacy regulators, law enforcement, and customers on privacy matters as appropriate.
- Managing the administration of the Privacy Management Platform and the relationship with the vendor (currently One Trust), including maintaining organizational structure of records and attributes, assigning roles and managing access, launching, monitoring, and reviewing assessment questionnaires, supporting the Data Subject Rights process, and creating ad‑hoc reports.
- As a subject‑matter expert in privacy laws in the USA and Americas, supporting the Global Data Privacy Officer to define and implement the strategy for the Data Privacy Compliance Program in the region, monitoring the external environment, reviewing new privacy laws and risk trends, and creating, implementing, and maintaining specific local or regional policies, standards, processes, notices, and templates.
- 5 years’ experience working in privacy/data protection, preferably some in‑house.
- Strong knowledge of U.S. and Latin American privacy laws and understanding of other global privacy laws, including EU GDPR.
- Relevant Privacy Certification (e.g., CIPP‑US, CIPM) is desirable.
- Ability to multitask, work proactively, and independently.
- Experience of working within a global organization.
- Good project/change management skills. Ability to engage with multiple stakeholders and to partner with the business and functions to get things done.
- Self‑starter, take the initiative and operate with a sense of urgency, decisiveness, and responsiveness with minimal supervision, know when to seek help, and be a part of a team as required.
- Demonstrate a positive,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).