EMEA Data Protection & Privacy Operations Lead

Columbia Threadneedle Investments; Greater London; On-site; GBP 95,000 - 135,000; Full time

Benefits offered by this job

In-office collaboration 4 days/week

Hybrid/onsite with occasional WFH day

Inclusive, performance-based culture

Job summary

Columbia Threadneedle Investments is seeking a privacy operations lead to manage non-U.S. data protection programs under the Global Privacy Office. You will partner with global teams to maintain compliance, address regulatory changes, and oversee DSARs and DPIAs across regions such as EMEA and APAC.

You will train staff, prepare risk reports, and drive process improvements while maintaining confidentiality and stakeholder trust in a fast-paced investment environment.

Qualifications

• Expertise with GDPR, EU AI Act and global privacy laws relevant to asset management in EMEA/APAC.
• Ability to analyse legislative requirements and map to practices.
• Proven experience in leading cross-functional, global teams.
• Strong analytical skills to assess privacy risk and impact.
• Experience managing complex privacy projects with multiple stakeholders.
• Discretion with confidential information and impartial decision making.
• Excellent written and verbal communication across audiences.
• Creative problem-solving with initiative and minimal supervision.
• Ability to prioritise conflicting demands and manage workload.
• Interest in evolving privacy technology and continuous improvement.

Responsibilities

• Act as Privacy Office liaison to non-U.S. CTI business and drive privacy program compliance.
• Maintain global CTI privacy program aligned with Global Privacy Office objectives.
• Collaborate with Information Security and CTI Compliance on program upkeep and implementation.
• Monitor regulatory changes across EMEA/APAC impacting privacy practices.
• Oversee Data Subject Rights requests and support HR and Transfer Agent teams.
• Prepare privacy risk and compliance reports with data analytics as needed.
• Contribute to privacy training content for staff and leadership.
• Lead data privacy DPIAs and DSARs with internal/external teams.
• Engage with data subjects and manage regulatory regulator needs.
• Provide leadership to a privacy team member assisting with DSARs/DPIAs.

Skills

GDPR & EU AI Act

Regulatory analysis

Global team collaboration

Analytical skills

Project management

Confidentiality & integrity

Communication skills

Innovative mindset

Prioritization

Learning new technologies

Tools

Privacy program tools

Job description

Columbia Threadneedle Investments is seeking a privacy operations lead to manage non-U.S. data protection programs under the Global Privacy Office. You will partner with global teams to maintain compliance, address regulatory changes, and oversee DSARs and DPIAs across regions such as EMEA and APAC.

You will train staff, prepare risk reports, and drive process improvements while maintaining confidentiality and stakeholder trust in a fast-paced investment environment.