Data Protection Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Data Protection Manager based in Italy.

As a Data Protection Manager, you will play a key role in shaping and driving the organization's privacy and data protection strategy across multiple business functions.

You will oversee the implementation of robust privacy governance frameworks, ensuring compliance with applicable regulations while enabling business growth.

This position combines strategic oversight with hands‑on execution, requiring close collaboration with legal, compliance, security, and product teams.

You will also lead a small privacy team, promote a culture of accountability, and help embed privacy‑by‑design principles into business processes and technology.

This is an excellent opportunity for an experienced privacy professional looking to make a meaningful impact in a fast‑paced, international, and highly regulated environment.

• Accountabilities
• Lead and mentor a small privacy team, setting priorities, reviewing deliverables, and supporting professional development.
• Drive the implementation and continuous improvement of the organization's data privacy framework, policies, and governance processes.
• Maintain key privacy documentation, including Records of Processing Activities (Ro PA), privacy risk registers, and Data Protection Impact Assessments (DPIAs).
• Ensure ongoing compliance with GDPR and other applicable data protection regulations while monitoring regulatory developments and recommending practical improvements.
• Develop and manage Data Processing Agreement (DPA) templates and oversee their implementation across the business.
• Oversee Data Subject Request (DSR) processes and coordinate responses in line with regulatory requirements.
• Support business and product teams by promoting privacy‑by‑design and privacy‑by‑default principles throughout project lifecycles.
• Manage personal data breach response activities, including assessments, documentation, and regulatory notifications where required.
• Coordinate privacy audits, vendor risk assessments, and internal compliance initiatives.
• Act as the primary advisor on data protection matters and deliver privacy awareness and training programs across the organization.

Requirements

• Bachelor's degree in Information Management, Law (with a focus on Data Protection or Privacy), Data Science, or a related discipline, or equivalent professional experience.
• At least 5 years of experience in data privacy, information security compliance, or a similar field.
• Previous experience leading or mentoring a small team.
• Strong knowledge of GDPR, CCPA, and at least one additional data privacy framework.
• Understanding of AML/KYC requirements and data protection obligations within regulated industries.
• Hands‑on experience implementing privacy programs, conducting DPIAs, and managing DSR processes.
• Familiarity with privacy management platforms and data governance tools.
• Excellent communication and stakeholder management skills with the ability to translate regulatory requirements into practical business solutions.
• Professional privacy certifications such as CIPP/E, CIPM, or CIPT are considered an advantage.

Benefits

• Competitive compensation package aligned with experience and local market conditions.
• Remote work opportunity within Romania.
• Strong work‑life balance initiatives.
• High level of autonomy and ownership in your role.
• Collaborative, people‑focused culture that encourages innovation and continuous improvement.
• Professional development and career growth opportunities.
• Opportunity to work alongside experienced professionals in a rapidly growing international business.
• Inclusive and supportive working environment where your contributions have a meaningful impact.

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer.

This processing is based on legitimate interest and pre‑contractual measures under applicable data protection laws (including GDPR).

You may exercise your rights (access, rectification, erasure, objection) at any time.

#J-18808-Ljbffr