Senior Manager of Data Protection and Privacy

As the Senior Manager, Data Privacy, you will take a proactive, hands-on role in ensuring that ESW adheres to the highest standards of data protection laws. You will collaborate with cross-functional teams to drive practical privacy initiatives, directly implement robust data governance frameworks, and manage privacy risk assessments.

This position involves substantial senior advisory responsibilities and cross-functional business partnering, requiring the ability to influence at all levels within the business. You will plan initiatives and actively execute a prioritised Privacy roadmap and serve as a key driver of ESW’s privacy strategy.

• Act as the primary owner of ESW’s data privacy efforts, hands-on coordinating and implementing measures to ensure compliance with GDPR, ePrivacy, and other applicable global data privacy regulations.
• Translate the high-level Privacy strategy into concrete, actionable tasks on a yearly roadmap.

• Provide both strategic direction and direct support on privacy matters across business areas (marketing, product development, sales, and customer service).
• Proactively identify risks, propose mitigations, and embed privacy by design throughout new and existing processes.

• Draft, refine, and continuously improve data privacy policies and procedures; ensure these are actively rolled out and adopted across the organization.
• Conduct Data Protection Impact Assessments (DPIAs) for new products, services, or processing activities, promptly managing identified risks.

• Champion an organisational culture of privacy and data protection, engaging teams directly to ensure that privacy considerations are integrated into all stages of product and service development.
• Oversee the creation and delivery of targeted training initiatives to ensure employees fully understand and comply with privacy requirements.

• Provide regular, data-driven reporting on progress against privacy goals to ESW and Asendia stakeholder committees.
• Partner with third-party vendors, conducting due diligence to ensure compliance with data protection laws and promptly addressing any identified gaps.

• Monitor emerging trends in data privacy, including new tooling/automation, case law, regulatory strategies, guidance, and legislation changes.
• Quickly adapt ESW’s privacy practices to address newly identified risks or compliance requirements.

• 5+ years of experience in data privacy, including at least 2–3 years in a leadership or managerial capacity.
• Proven track record of hands-on engagement with data privacy in a fast-paced environment.
• Experience conducting DPIAs and privacy risk assessments, with direct involvement in implementing remediation actions.
• Deep understanding of GDPR, ePrivacy Regulations, and other relevant data protection legislation.
• CIPP/E, CIPM, or similar certifications are highly desirable.
• Ability to collaborate across diverse teams and effectively translate privacy requirements into practical, actionable steps.
• Familiarity with privacy management platforms (e.g., OneTrust).
• Excellent interpersonal, written, and verbal skills, with proven success in conveying the importance of privacy to varied audiences.