Data Privacy Manager, Málaga

Ebury; Orce; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Salario competitivo

Mentoría y desarrollo profesional

Progresión de carrera clara

Beneficios de salud

Job summary

Ebury está buscando un Data Privacy Manager para liderar pilares de privacidad a nivel global, supervisando DPIAs y evaluaciones de riesgo, incluido el marco del EU AI Act. Coordina acuerdos de datos con terceros y gestiona incidentes de brechas.

Se requiere dominio de EU/UK GDPR, certificaciones de privacidad y experiencia en multi‑jurisdicción. Se valorará experiencia en banca/fintech y fluidez en inglés y francés, con español deseable.

Qualifications

• 4+ años de experiencia en privacidad o protección de datos, con gestión de programas.
• Licenciatura en derecho, economía, administración de empresas; máster deseable.
• Conocimiento experto de la GDPR de la UE y del Reino Unido.
• Experiencia en DPIAs y evaluaciones de riesgo de privacidad.
• Experiencia en implementación de programas de cumplimiento multi‑jurisdicción
• Certificación de privacidad (p. ej., CIPP/E, CIPM) requerida.

Responsibilities

• Dirigir el desarrollo y supervisión operativa de pilares de privacidad a nivel global, incluida la IA de la UE Act.
• Gestionar DPIAs y evaluaciones de riesgo de privacidad con mitigación.
• Liderar acuerdos de procesamiento/compartición de datos con terceros.
• Coordinar respuesta a incidentes de brechas de datos y reportes al DPO.
• Trabajar con HR, Marketing, Legal y Seguridad para cumplir requisitos de privacidad.
• Mantenerse al día con desarrollos de privacidad e IA para traducirlos en guías prácticas.

Skills

GDPR knowledge

Program management

OneTrust

Stakeholder mgmt

DPIA

Privacy risk assessments

Legal & compliance

English & French

Spanish desirable

Privacy certification

Education

Bachelor's in law/economics/business

Master's degree desirable

Tools

OneTrust

Job description

Descripción del trabajo: Data Privacy Manager

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. If you’re a collaborator who wants to help transform how businesses operate globally, we would love to discuss how Ebury can accelerate your career so you can shape the future.

Overview

The Data Privacy Manager is a leadership and programme management role responsible for the ongoing development, operational oversight, and strategic direction of specific privacy pillars across the Group, including the Group’s response to emerging AI governance obligations such as the EU AI Act. This role manages projects, guides analysts, and acts as a primary contact for key business areas.

Reporting Structure: This role reports to the Head of Data Privacy/Deputy DPO.

Key Responsibilities

• Own and drive the enhancement of specific global privacy program pillars (e.g., RoPA management, Training Awareness), including ensuring alignment with emerging regulations like the AI Act.
• Take ownership of the Privacy Risk Register. Lead Data protection impact assessments (DPIAs) and privacy risk assessments – including for AI systems within scope of the EU AI Act – and implement effective mitigation strategies.
• Manage and deliver cross‑functional privacy compliance projects, including those relating to the implementation of EU AI Act requirements where they intersect with data protection (e.g., transparency, data governance, and record‑keeping obligations).
• Lead the drafting and negotiation of complex and high‑risk Data Processing/Sharing Agreements with third parties.
• Oversee the end‑to‑end handling of all Data Breach incidents, coordinating internal response, documentation, and making recommendations for reporting to the Deputy DPO.
• Serve as the primary privacy point of contact for one or more critical business functions (e.g., HR, Marketing, Legal, Security, Compliance), ensuring their compliance needs are met.
• Monitor emerging privacy and AI governance developments – including the EU AI Act and its implications for data protection – and translate them into actionable guidance for the business.

Required Skills Experience

• 4+ years of dedicated data privacy or data protection experience, including program management.
• Bachelor’s degree in law, economics, business administration, or a related field is required, and a relevant master’s degree is highly desirable.
• Expert‑level knowledge of EU and UK GDPR is required. Knowledge of other global data protection laws (e.g., DIFC DP Law, PIPL, LGPD, PIPEDA) is highly desirable, as is a working understanding of the EU AI Act and its interface with data protection.
• Proven ability to conduct privacy risk assessments (including DPIAs) and compliance monitoring activities, including in respect of AI systems.
• Practical experience implementing multi‑jurisdictional compliance programs.
• Strong working knowledge of the OneTrust Privacy Management platform is required.
• Demonstrated ability to influence and manage senior stakeholders across different geographies and functions.
• Ability to work under pressure, to meet tight deadlines, while maintaining high attention to detail.
• Professional fluency (written and verbal) in English and French is required, with proficiency in Spanish highly desirable.
• Relevant Privacy certification (e.g., CIPP/E, CIPM) required.
• Experience in the Banking and/or FinTech sector is highly desirable.

Why Ebury?

• Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.
• Dedicated Mentorship: Learn directly from experienced managers who are invested in your success.
• Cutting‑Edge Technology: Leverage state‑of‑the‑art tailor‑made tools and systems that enable you to perform at your best.
• Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury.
• Dynamic Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritised.
• Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.
• Central Office: A fantastic location with excellent transport links.
• GDPR,