- Company Name
- SEGA Europe
- Job Title
- Privacy & Compliance Manager
- Job Description
-
**Job Title:** Privacy & Compliance Manager
**Role Summary:**
Lead the development, implementation, and monitoring of privacy and compliance initiatives across a mid‑size organization. Drive privacy‑by‑design principles, align business processes with regulatory requirements, and manage day‑to‑day compliance activities, vendor due diligence, and data protection programs.
**Expectations:**
- Own the privacy program’s policy and procedural framework, ensuring continuous improvement and alignment with emerging regulations.
- Deliver timely, compliant solutions for data subject requests, audits, and regulatory inquiries under tight deadlines.
- Collaborate cross‑functionally with legal, security, and business units to operationalise compliance recommendations and embed privacy controls.
- Maintain accurate records of processing activities and report on compliance status to senior leadership.
**Key Responsibilities:**
- Draft, update and document privacy policies, procedures, and data audit frameworks.
- Manage daily compliance operations: privacy compliance process implementation, auditing, and automation tracking.
- Lead end‑to‑end privacy impact assessments, data subject rights workflows, breach assessment protocols, and training material development.
- Coordinate vendor onboarding and due diligence with legal and security teams.
- Address compliance inquiries and support regulatory reporting.
- Facilitate the completion of onboarding documentation and assessment requisites for new business areas.
**Required Skills:**
- 1–2 years’ experience in privacy or compliance, preferably with data protection focus.
- Demonstrated ability to manage complex projects from initiation through completion, including post‑implementation reviews.
- Strong stakeholder communication, able to articulate complex regulatory concepts to non‑technical audiences.
- Detail‑oriented, proactive, and comfortable working autonomously with multiple concurrent priorities.
- Proficiency in enterprise privacy tools (OneTrust or equivalent) preferred.
- In‑depth knowledge of UK & EU GDPR, Data Protection Act 2018, PECR, and related regulatory frameworks.
- Awareness of game‑industry specific regulations (e.g., UK AADC, COPPA, UK OSA) is advantageous.
**Required Education & Certifications:**
- Bachelor’s degree in Law, Business, Information Security, or related field (preferred).
- Relevant privacy/compliance certifications such as CIPP/E, CIPP/UK, CIPM, or equivalent are a plus.
---
Brentford, United kingdom
On site
20-11-2025