Data Privacy Manager at Plan International

The Opportunity

You will join our Governance, Legal, Assurance & Risk Group and play a pivotal role in ensuring Plan International meets its data privacy obligations across a complex global operating environment.

Working closely with our other Data Privacy Manager, you will, providing strategic and operational leadership on data privacy compliance, risk management and best practice. Working closely with colleagues across Safeguarding, Risk, Communications, Sponsorship, People & Culture, Information Technology and programme teams globally, you will champion a privacy-by-design culture and ensure data privacy is embedded in everything we do. 

What you’ll do

• Lead data privacy risk management across PII.
• Lead and implement Plan International’s global data privacy strategy and framework.
• Advise senior leaders and business units on data privacy risks, legal obligations and emerging requirements.
• Design and deliver engaging global data protection training programmes. 
• Maintain and continuously improve privacy policies, procedures and compliance frameworks
• Support the organisation’s response to data incidents and breaches, working within established incident and crisis management processes.
• Lead review of privacy impact assessments and provide practical, risk-based guidance to teams managing personal data.
• Maintain records of processing activities and ensure lawful bases for processing are documented and monitored.
• Draft, review and negotiate data processing and data transfer agreements.
• Engage with data subjects where required and support the management of data rights requests.
• Drive organisational awareness and culture change to ensure privacy compliance becomes business as usual across the Plan International.

About You 

You are a highly credible privacy professional with experience working within complex, multinational organisations and advising stakeholders across multiple jurisdictions. 

You will bring:

• Significant experience in a data privacy or data protection role.
• Strong knowledge of GDPR, or similar regulatory regimes, and broader international data protection requirements.
• Demonstrated ability to advise strategically on data privacy matters.
• Proven experience driving privacy culture change and embedding compliance programmes across large organisations.
• Knowledge of data collection and protection issues relating to children and young people
• Experience managing data incidents, investigations and breach response activities.
• Excellent senior stakeholder management skills, with the ability to influence and build relationships at all levels.
• Strong analytical, drafting and problem-solving capabilities.
• Full professional proficiency in English and strong communication skills and the ability to provide clear, strategic, pragmatic advice in fast-paced and evolving environments.
• Experience designing and implementing effective compliance systems, policies and processes.
• A recognised privacy qualification such as CIPP, CIPM, BCS or equivalent.