Data Privacy Officer

WELLA COMPANY; London; On-site; GBP 60,000 - 100,000; Full time

Job description

About Wella:

Wella is one of the world's leading professional and retail hair companies. It is a beauty collective with a mission to enable consumers to look & feel like their true self. Its love brands, which include beauty icons such as Wella, Clairol, OPI, and ghd (all together "Wella"), are co-created by & designed for the beauty junkies of today & tomorrow. Wella has a presence in over 100 countries and an estimated annual net revenue of $2.3Bn. The Wella Company and its brands are committed to a range of social causes as well as seeking to minimize its impact on the environment. For additional information about Wella please visit www.wella.com.

THE ROLE

As part of the Legal Department for The Wella Company, we are looking for the future Wella Data Privacy Officer, based in the UK.

This is an outstanding opportunity for a mid to senior level data privacy professional who combines flawless functional expertise with demonstrable enterprise-wide strategic capabilities to support a global hair and beauty business on a positive journey of evolution and development.

The successful candidate will work closely with the Chief Compliance Officer (CCO) to shape and lead our global approach to data privacy compliance with the aim of developing a 'best in class' structure aligned to the global strategy, business and values of the organization; drawing on strong privacy and data protection experience combined with a strong business-minded approach. The successful candidate will be instrumental in the advancement of protecting Wella Company's data and driving a culture of data by design throughout the company.

Responsibilities

1. Setting the company-wide Data Privacy strategy in conjunction with the CCO and the Legal Leadership Team.
2. Developing, implementing and maintaining the necessary Data Privacy policies, standards and procedures.
3. Managing and enhancing as necessary from time to time the global privacy compliance program ensuring compliance with global data protection regulations.
4. Providing day to day support and advice to the internal business lines and functions on all matters related to data privacy and digital initiatives.

This role will report into the CCO, will have one direct report, and will include direct interactions with the other members of the legal team worldwide.

Additional Responsibilities

• Driving a privacy by design culture across The Wella Company.
• Managing the Data Privacy Manager role.
• Driving Wella's Data Privacy programme to ensure compliance with applicable laws globally.
• Maintaining Wella's Data Privacy web resources.
• Engaging with senior executive stakeholders to ensure accountability and ownership of privacy.
• Developing, implementing and communicating policies and processes related to privacy practices.
• Conducting data privacy risk assessments and audits.
• Advising on data protection impact assessments and data breaches.
• Embedding privacy into marketing, digital, strategy, and product development.
• Interacting with privacy regulators and law enforcement globally.
• Monitoring new privacy laws and regulations.
• Advising teams on the management of a global privacy program.
• Conducting training on privacy matters.
• Providing legal advice on data privacy rules and regulations.
• Managing external legal counsel advice on privacy globally.
• Assisting with compliance with data subject rights under GDPR.
• Working with procurement and business teams on data privacy clauses in agreements.

QUALIFICATIONS

• At least 10-15+ years post qualification experience as a lawyer in the commercial/privacy department at a leading law firm or in-house function.
• Extensive experience in US, national and European data protection laws and practices.
• Professional certification in data privacy (e.g., CIPP, CIPM, CIPT) is preferred.
• Experience of managing others is preferable.
• Experience with data privacy tools and technologies.
• Familiarity with data protection impact assessments (DPIAs).
• Knowledge of cybersecurity principles and practices.
• Excellent academics and training.
• A proven track record in privacy programme management.
• Experience advising on e-commerce, digital, and emerging technologies is preferable.
• Excellent soft skills for developing strong relationships with team members and business partners.