Data Privacy Manager, PepsiCo Europe

PepsiCo; Vitoria; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

A multinational food and beverage company is looking for a proactive Data Privacy Manager in Vitoria, Spain. This role involves leading privacy compliance across HR operations, ensuring alignment with GDPR and UK regulations. The ideal candidate should have a minimum of 8 years' experience in data privacy, with strong knowledge in HR processes and data subject rights. This position offers significant responsibilities in risk management and privacy training.

Formación

• Minimum 8 years of experience in data privacy, particularly in HR data.
• Strong working knowledge of EU GDPR and UK DPA 2018.
• Experience with DPIAs and managing DSARs.

Responsabilidades

• Conduct and advise on Data Protection Impact Assessments for HR.
• Lead annual HR privacy risk assessments and compliance monitoring.
• Develop and deliver privacy training modules.

Conocimientos

Data privacy compliance

Risk management

GDPR knowledge

HR collaboration

Privacy training

Educación

CIPP/E certification

Herramientas

OneTrust

Securiti

Descripción del empleo

Overview

We are seeking a proactive and knowledgeable Data Privacy Manager to lead privacy compliance efforts across HR operations in the EU and UK. This role will serve as the primary privacy advisor to HR teams, ensuring that all employee data processing activities align with GDPR, UK DPA 2018, and emerging regulations such as the ePrivacy Regulation. The ideal candidate will report directly to the DPO, have a strong understanding of HR processes, data subject rights, and privacy-by-design principles, and will be comfortable working across legal, IT, and business functions to embed privacy into everyday operations.

Responsibilities

Privacy Compliance & Risk Management:

• Conduct and advise on Data Protection Impact Assessments (DPIAs) for HR systems and processes;
• Maintain and update Records of Processing Activities (ROPAs) for HR-related data;
• Lead annual HR privacy risk assessments, identifying and mitigating regulatory and operational risks;
• Monitor compliance with data retention schedules, employee privacy notices, and internal controls;
• Collaborate with global Privacy colleagues to help drive simplification and embed standardised processes and procedures;

Data Subject Rights & HR Collaboration;

• Partner with HR teams to manage Data Subject Access Requests (DSARs), ensuring timely and lawful responses;
• Support HR in disciplinary, grievance, and absence cases, ensuring documentation is privacy-compliant and legally privileged where appropriate;
• Advise on access permissions in HR systems (e.g., Employee Central), ensuring data minimisation and legitimate access.

Training & Awareness:

• Develop and deliver privacy training modules;
• Promote privacy awareness through internal communications and HR leadership engagement.

Audit & Governance

• Lead internal and external HR privacy audits, including SOX-related controls where applicable;
• Serve as the Data Privacy Office representative in Privacy Councils, ensuring alignment with enterprise-wide privacy strategy.

Qualifications

• Minimum 8 years of experience in data privacy, with a focus on HR or employee data;
• Strong working knowledge of EU GDPR, UK DPA 2018, and HR regulatory frameworks;
• Experience conducting DPIAs, managing DSARs, and advising on HR system access controls;
• Familiarity with privacy tools such as OneTrust, Securiti, or similar platforms;
• CIPP/E certified with CIPM or CIPT highly desirable.