Data Privacy Manager

Role Overview

You will join the Governance, Legal, Assurance & Risk Group as one of two Data Privacy Managers responsible for steering privacy compliance across Plan International’s global operations. Your work will involve advising senior leaders and programme teams on legal obligations, embedding privacy-by-design into daily practice, and leading responses to data incidents. The role matters because it protects the personal information of children, partners, and staff across a complex, multi-jurisdictional organisation.

Key Responsibilities

• Lead data privacy risk management for personally identifiable information, identifying and mitigating exposure across all business areas.
• Drive the implementation and continuous improvement of Plan International’s global data privacy strategy, framework, policies, and procedures.
• Provide strategic, practical advice to senior leaders and business units on data privacy risks, legal obligations, and emerging regulatory requirements.
• Design and deliver engaging global data protection training programmes that build awareness and embed compliance as business as usual.
• Support the organisation’s response to data incidents and breaches within established incident and crisis management processes, including investigation and remediation.
• Review privacy impact assessments and offer risk-based, actionable guidance to teams managing personal data across safeguarding, sponsorship, People & Culture, IT, and programme functions.
• Maintain records of processing activities, document lawful bases, and draft, review, and negotiate data processing and data transfer agreements.
• Manage data subject rights requests and liaise directly with individuals where required.

Requirements & Qualifications

• Significant, hands-on experience in a data privacy or data protection role within a complex, multinational organisation.
• Strong knowledge of GDPR or similar regulatory regimes, along with broader international data protection requirements.
• Demonstrated ability to advise strategically on privacy matters and influence senior stakeholders across multiple jurisdictions.
• Proven experience driving privacy culture change and embedding compliance programmes across large, decentralised teams.
• Understanding of data collection and protection issues relating to children and young people.
• Experience managing data incidents, investigations, and breach response activities.
• Excellent stakeholder management, analytical, drafting, and problem-solving capabilities, with the ability to provide clear, pragmatic advice in fast-paced environments.
• Full professional proficiency in English and strong communication skills.
• A recognised privacy qualification such as CIPP, CIPM, BCS, or equivalent.