Global Privacy & Data Governance Lead

1011 Amadeus IT Group S.A.; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Global learning and development

Hybrid work model

Diversity and inclusion

Supportive work environment

Purpose-driven mission

Reliable employer

Job summary

Amadeus IT Group is seeking a Business Privacy Principal Specialist to embed privacy and data governance across Hospitality solutions. You will translate requirements into risk‑based guidance, acting as trusted privacy advisor with Legal, Data Office, and Digital Trust Office.

You will lead privacy policy implementation, assess risks, maintain records of processing activities, support audits, and integrate privacy into vendor/customer relationships.

Qualifications

• Bachelor’s degree or equivalent in IT, Computer Science, Law, Risk Management, or a related discipline.
• Around five years of relevant experience in privacy, governance, risk, compliance, information security, data governance, or AI governance.
• Strong knowledge of global regulations and frameworks such as GDPR, CCPA/CPRA, Privacy by Design, and ISO 27701.
• Experience performing privacy assessments, managing vendor risk, incident response, and privacy‑by‑design activities.
• Ability to apply privacy principles in a practical, proportionate, and business‑oriented way.
• Excellent communication and stakeholder management skills.
• Fluent English; Spanish would be an advantage.
• Nice to Have Certifications such as CIPM, CIPP, CIPT, or ISO 27701 Lead Implementer.
• Experience in data governance or a DAMA certification.
• Knowledge of consent and preference management technologies, including cookie consent platforms.
• Experience identifying data flows and maintaining documentation.
• Familiarity with tools such as Archer or Collibra.

Responsibilities

• Lead the implementation of privacy policies, standards, and governance requirements within the Hospitality business.
• Identify and assess privacy risks, define mitigation measures, and promote Privacy by Design across initiatives.
• Maintain and review privacy documentation and records of processing activities.
• Provide practical guidance to business stakeholders on privacy, legal, and operational aspects.
• Coordinate internal and external privacy audits and contribute to governance committees.
• Support implementation of data governance frameworks, policies, and catalogues.
• Integrate privacy and compliance requirements into vendor and customer relationships.
• Communicate privacy updates, key metrics, and emerging risks to stakeholders and leadership.

Skills

Stakeholder management

Communication

Privacy by Design

Risk assessment

Information security

Data governance

GDPR knowledge

English fluency

Spanish understanding

Education

Bachelor’s degree or equivalent in IT, Computer Science, Law, Risk Management, or related discipline

DAMA certification

Tools

Archer

Collibra

Job description

Amadeus IT Group is seeking a Business Privacy Principal Specialist to embed privacy and data governance across Hospitality solutions. You will translate requirements into risk‑based guidance, acting as trusted privacy advisor with Legal, Data Office, and Digital Trust Office.

You will lead privacy policy implementation, assess risks, maintain records of processing activities, support audits, and integrate privacy into vendor/customer relationships.