Data Protection Manager

Fédération Internationale de Football Association; Rio de Janeiro; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

FIFA in Brazil invites a Data Protection Manager to lead the privacy program for the FIFA Women's World Cup Brazil 2027. You will work with the Data Protection Office and Technology team to ensure compliant processing of personal data throughout the tournament lifecycle.

Reporting to Head of Technology, you will embed privacy by design, conduct PIAs/DPIAs, monitor evolving privacy laws, and provide risk-based guidance to stakeholders across a multinational organization.

Qualificações

• Bachelor's degree in a related field is required.
• Expert knowledge of LGPD/privacy compliance with practical DPIA/PIA experience.
• Experience advising on privacy across contracts and third parties.
• Strong understanding of international privacy frameworks (GDPR).
• Ability to provide pragmatic, risk-based privacy guidance.

Responsabilidades

• Serve as the primary privacy and data protection lead for FIFA Women's World Cup Brazil 2027.
• Ensure compliance with LGPD and other privacy requirements.
• Develop and maintain privacy policies, standards, procedures, and controls aligned with FIFA's privacy framework.
• Provide practical, risk-based privacy guidance to stakeholders and promote privacy by design.
• Lead privacy-by-design reviews for projects, systems, events, products, and initiatives.
• Conduct PIAs, DPIAs, including RIPD, privacy reviews, and risk assessments.
• Monitor developments in Brazilian privacy laws and advise on their impact on operations.

Conhecimentos

Analytical skills

Risk-based advice

Stakeholder management

Project management

Autonomy

Cross-cultural collaboration

Formação académica

Bachelor's degree in a related field

Descrição da oferta de emprego

Data Protection Manager

Department: Technology

Employment Type: Fixed Term - Full Time

Location: Brazil

Description

FIFA has established a Local FIFA Subsidiary in Brazil to work together with FIFA Zurich to deliver the biggest women’s sporting event in the world, the FIFA Women’s World Cup 2027™ ("FWWC2027") that for the first time ever, is hosted in South America in Brazil. Now is your time to be part of the workforce that is creating this unique and unforgettable experience.

Please submit your CV in English, as it will be reviewed by an international team.

THE POSITION

Reporting organizationally to the Head of Technology, the Data Protection Manager will be a key member of the FIFA27 Technology team and will work in close collaboration with FIFA's Data Protection Office and other key stakeholders to ensure that all data protection and privacy requirements for the FIFA Women's World Cup Brazil 2027™ are implemented in accordance with FIFA policies and applicable privacy legislation. The Data Protection Manager will lead the delivery of the tournament's data protection and privacy programme, providing expert guidance on privacy compliance, embedding privacy by design across operations and projects, and ensuring the secure, lawful, and responsible processing of personal data throughout the tournament lifecycle.

KEY RESPONSIBILITIES

• Serve as the primary privacy and data protection lead for FIFA Women's World Cup Brazil 2027™.
• Ensure compliance with LGPD and other applicable privacy and data protection requirements.
• Develop, implement, and maintain privacy policies, standards, procedures, and controls aligned with FIFA's global privacy framework and Brazilian legal requirements.
• Provide practical, risk based privacy guidance to business stakeholders and promote privacy by design across projects, systems, technologies, vendors, and business initiatives.
• Lead privacy-by-design reviews for projects, technologies, systems, events, products, and business initiatives, ensuring privacy requirements are embedded from inception.
• Conduct Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), including Relatórios de Impacto à Proteção de Dados Pessoais (RIPD), privacy reviews, and risk assessments.
• Monitor developments in Brazilian privacy laws and regulations and advise on their impact on business operations.

YOUR PROFILE

Education

• Bachelor's degree in Law, Compliance, Information Management, Information Security, Business Administration, or a related field.

Experience

• Strong experience in data protection, privacy, compliance, legal, information governance, or a related field.
• Expert knowledge of Brazilian data protection laws and regulations, particularly the Lei Geral de Proteção de Dados (LGPD), is required, including practical experience advising on compliance, data subject rights, privacy risk assessments, and incident management.
• Good understanding of international privacy frameworks, including GDPR and cross-border data transfer requirements.
• Experience conducting PIAs, DPIAs, privacy reviews, and privacy risk assessments.
• Experience reviewing privacy provisions in contracts and managing third-party privacy risks.
• Experience working in multinational or matrixed environments is desirable.

Skills & Competencies

• Strong analytical, problem-solving, and decision-making skills.
• Ability to provide pragmatic, business-focused, and risk-based advice.
• Excellent stakeholder management and communication skills.
• Strong organizational and project management capabilities.
• Ability to work independently and manage competing priorities in a fast-paced environment.
• Collaborative mindset with the ability to work effectively across cultures and functions.

Certifications & Requirements

• Privacy certification(s) such as CIPP, CIPM, CIPT, CDPO/BR, or equivalent.
• Experience supporting major international events, sports organizations, or large-scale projects.
• Familiarity with information security and cybersecurity principles.
• Right to work in Brazil
• Fluent in English
• Native or Fluent in Portuguese
• Proficiency in any other FIFA language (FR / ES / GER) is an asset

Various

• Willing to travel within Brazil (up to 30%), with some trips with a long duration (15 days or more)