Global Data Privacy & Compliance Leader (Hybrid)

PureGym AG; Leeds; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Private healthcare

Life insurance x4

Company pension contribution

25 days annual leave

Personal day

Job summary

PureGym is seeking a Group Data Compliance Manager who’ll also act as Designated Data Protection Officer to join the Health & Safety team across the group.

You’ll lead privacy strategy, oversee governance, manage DPIAs and data subject rights, and ensure cross-border data transfers comply with GDPR and related regimes.

You will guide regulatory engagement, incident response and provider privacy arrangements, balancing compliance with commercial goals.

Qualifications

• Significant experience leading data protection and privacy programmes in multi-jurisdictional environments.
• Demonstrable experience acting as a Data Protection Officer or senior privacy professional.
• Expert knowledge of UK GDPR, EU GDPR, Swiss FADP, applicable US privacy legislation and international transfer requirements.

Responsibilities

• Leading the Data Protection Officer function.
• Regulatory oversight and engagement with authorities.
• Privacy compliance programme management across markets.
• Data Protection Impact Assessments (DPIAs).
• Management of Data Subjects’ Rights and complaints.
• Governance of cross-border data transfers.
• Third-party risk management and review of providers.
• Incident and breach management.
• Maintenance of Group Policies and standards.
• Training, awareness and culture building.
• Data mapping, retention schedules and retention governance.

Skills

Data protection

Privacy governance

DPIA

Regulatory oversight

Stakeholder management

Job description

PureGym is seeking a Group Data Compliance Manager who’ll also act as Designated Data Protection Officer to join the Health & Safety team across the group.

You’ll lead privacy strategy, oversee governance, manage DPIAs and data subject rights, and ensure cross-border data transfers comply with GDPR and related regimes.

You will guide regulatory engagement, incident response and provider privacy arrangements, balancing compliance with commercial goals.