Information TechnologyFull-TimeSenior-level(6+ yrs)
Job Description
Role Overview
You will join our Governance, Legal, Assurance & Risk Group and play a pivotal role in ensuring Plan International meets its data privacy obligations across a complex global operating environment.
Working closely with our other Data Privacy Manager, you will provide strategic and operational leadership on data privacy compliance, risk management, and best practice. Working closely with colleagues across Safeguarding, Risk, Communications, Sponsorship, People & Culture, Information Technology and programme teams globally, you will champion a privacy-by-design culture and ensure data privacy is embedded in everything we do.
Key Responsibilities
Lead data privacy risk management across PII.
Lead and implement Plan International’s global data privacy strategy and framework.
Advise senior leaders and business units on data privacy risks, legal obligations, and emerging requirements.
Design and deliver engaging global data protection training programmes.
Maintain and continuously improve privacy policies, procedures, and compliance frameworks.
Support the organisation’s response to data incidents and breaches, working within established incident and crisis management processes.
Lead review of privacy impact assessments and provide practical, risk-based guidance to teams managing personal data.
Maintain records of processing activities and ensure lawful bases for processing are documented and monitored.
Draft, review, and negotiate data processing and data transfer agreements.
Engage with data subjects where required and support the management of data rights requests.
Drive organisational awareness and culture change to ensure privacy compliance becomes business as usual across Plan International.
Qualifications and Experience
BA/BSc/HND or Professional Certificate.
A recognised privacy qualification such as CIPP, CIPM, BCS, or equivalent.
Significant experience in a data privacy or data protection role.
Strong knowledge of GDPR, or similar regulatory regimes, and broader international data protection requirements.
Demonstrated ability to advise strategically on data privacy matters.
Proven experience driving privacy culture change and embedding compliance programmes across large organisations.
Knowledge of data collection and protection issues relating to children and young people.
Experience managing data incidents, investigations, and breach response activities.
Excellent senior stakeholder management skills, with the ability to influence and build relationships at all levels.
Strong analytical, drafting, and problem-solving capabilities.
Full professional proficiency in English and strong communication skills.
Experience designing and implementing effective compliance systems, policies, and processes.
