Lead, Privacy Engineering & Data Governance

30450 Condé Nast Holdings Limited; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Condé Nast is seeking a hands-on technical specialist to lead privacy and data governance across digital platforms. You will inspect data collection, consent behaviour, data flows and regulatory requirements, partnering with Product and Engineering to implement fixes.

You will work with privacy tools and analytics tech to monitor compliance, support audits, and embed governance into engineering workflows. London-based role.

Qualifications

• Strong hands-on understanding of how websites and apps collect and transmit data.
• Experience using browser developer tools (console, network inspection).
• Ability to inspect dataLayers, HTML and JSON, cookies, tags, pixels, trackers, APIs and SDKs.
• Working understanding of GDPR, CNIL, CCPA or equivalent privacy regimes.
• Experience with analytics, advertising, consent and tag management tech (GTM, Snowplow, Didomi, SourcePoint, OneTrust or Ethyca).
• Experience investigating technical issues and collaborating with Product/Engineering teams to resolve them.

Responsibilities

• Investigate websites, apps and backend services using browser tools, dataLayers, network traffic, browser storage, cookies, tags, pixels, SDKs and APIs to understand data collection and usage.
• Review analytics, advertising, consent and third-party implementations; test behavior before/after consent and flag misconfigurations.
• Translate technical findings into clear requirements and work with Product/Engineering/vendors to resolve issues and prevent recurrence.
• Define practical controls for tracking, consent, data access, classification, retention and use including self-service analytics and AI.
• Maintain accurate data maps covering systems, vendors, data elements and processing activities; support DPIAs and regulatory docs.
• Run monitoring using Didomi, Privado, ObservePoint; maintain records of reviews, remediation and technical decisions.

Skills

Privacy engineering

Analytics engineering

Tag management

Browser tools

Data layers

Regulatory compliance

Tools

GTM

Snowplow

Didomi

SourcePoint

OneTrust

Ethyca

Job description

Condé Nast is one of the world’s most renowned media publishing companies, creating and distributing every type of media today, spanning print and digital publishing in all formats. With a portfolio of some of today’s most influential brands, the company continues to grow its audience through a global operational and content infrastructure across its 12 owned and operated markets. Headquartered in New York City, the company’s owned and operated markets include China, France, Germany, India, Italy, Japan, Mexico & Latin America, Spain, Taiwan, UAE/Dubai, the U.K., and the U.S., with additional local license partners in over twenty additional markets across the globe. Lead brands include Vogue, The New Yorker, GQ, Architectural Digest, Condé Nast Traveler, Vanity Fair, Wired, Allure, Ars Technica, Bon Appétit, House & Garden, Pitchfork, Tatler, and Vogue Business.

Job Description Location: London, GB Company Condé Nast is a global media company producing the highest quality content with a footprint of more than 1 billion consumers in 32 territories through print, digital, video and social platforms.

with a portfolio includes many of the world’s most respected and influential media properties including Vogue, Vanity Fair, Glamour, Self, GQ, The New Yorker, Condé Nast Traveler/Traveller, Allure, AD, Bon Appétit and Wired, among others. Condé Nast is a global media company, home to iconic brands including Vogue, GQ, Glamour, CN Traveller, Vanity Fair, Wired, The World of Interiors, House & Garden and Tatler, among many others.

Purpose

We are looking for a hands-on technical specialist to lead how we identify and resolve privacy and data governance issues across our digital platforms. You should enjoy getting under the hood of websites and apps to understand how data is collected and transmitted. You will inspect dataLayers, browser consoles and network calls, review HTML and JSON and investigate cookies, tags, pixels, APIs and SDKs. You will then work with Product and Engineering teams to understand what needs to change and help see the work through to implementation. The role sits within Data Governance and works closely with Product, Engineering, Commercial, Audience and Business & Legal Affairs. You do not need to come from a traditional privacy background or be a software engineer. We are looking for someone with strong technical experience who understands, or has a strong interest in, privacy, consent and responsible data use. The role also covers broader technical data governance, including data flows, classification, access and monitoring, particularly as data is increasingly used for self-service analytics and AI. The role is primarily focused on hands-on technical investigation and assurance, including inspecting data collection, tracking technologies and consent behaviour. Other work involves leading governance and remediation work with Product and Engineering, maintaining data mapping, setting up and improving compliance monitoring and related governance controls, as well as supporting privacy and regulatory requirements in partnership with Business & Legal Affairs.

Responsibilities

• Investigate websites, apps and backend services using browser developer tools, dataLayers, network traffic, browser storage, cookies, tags, pixels, SDKs and APIs to understand how data is collected, shared and used.
• Review analytics, advertising, consent and third party implementations, test behaviour before and after consent choices, and identify where live activity does not match the intended configuration.
• Turn technical findings into clear requirements and work with Product, Engineering and vendors to resolve issues, test changes and prevent them from recurring.
• Define practical controls for tracking, consent, data access, classification, retention, ownership and appropriate use, including data used for self service analytics and AI.
• Maintain accurate data maps covering systems, vendors, data elements and processing activities, and support Records of Processing Activities, Data Protection Impact Assessments and regulatory documentation.
• Run monitoring using tools such as Didomi, Privado and ObservePoint, investigate findings and maintain clear records of reviews, remediation and technical decisions.
• Work with Business & Legal Affairs on GDPR, ePrivacy, CNIL and other privacy requirements, providing technical evidence for regulatory reviews, audits and vendor assessments.
• Explain technical data flows, risks and solutions clearly to technical and non technical stakeholders, and help embed privacy and governance into Product and Engineering workflows.

Skills and Experience

We are open to candidates from different technical backgrounds. Relevant experience may come from Privacy Engineering, Analytics Engineering, Analytics Implementation, Ad Tech, MarTech, Tag Management, Solutions Engineering, Data Engineering or Technical Consulting. You should have:

• Strong hands on understanding of how websites and apps collect and transmit data
• Experience using browser developer tools, including the console, network inspection and browser storage
• Ability to inspect and understand dataLayers, HTML and JSON, with a good understanding of cookies, tags, pixels, trackers, APIs and SDKs
• Working understanding of privacy and compliance principles (e.g. GDPR, CNIL, CCPA) or experience applying technical skills in a regulated environment
• Experience with analytics, advertising, consent and tag management tech e.g. GTM, Snowplow, Didomi, SourcePoint, OneTrust or Ethyca, Ketch or similar
• Experience investigating technical issues and working with Product or Engineering teams to resolve them
• Understanding of data flows and how information moves between first party systems and third parties
• Strong analytical and problem solving skills, with the ability to explain technical findings clearly to technical and non technical stakeholders
• Enough experience to take ownership of complex work and drive it through to resolution
• Experience in the following would be useful but is not essential: Consent management and IAB TCF Data governance, classification, metadata, lineage or access controls Databricks or other modern data platforms SQL or other methods of inspecting data Digital media, programmatic advertising or audience technology AI or self service analytics governance

You do not need to be a privacy lawyer or a software engineer. The strongest candidates will be technically curious, comfortable investigating how systems actually behave and interested in using those skills to improve privacy and data governance.

Equal Opportunity

Condé Nast is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, familial status and other legally protected characteristics.

Additional Information

Condé Nast is a global media company home to iconic brands including Vogue, GQ, AD, Condé Nast Traveler, Vanity Fair, Wired, The New Yorker, Glamour, Allure, Bon Appétit and many more. Headquartered in New York and London, the company produces award-winning journalism, content and entertainment for every platform today and operates in 32 markets worldwide including China, France, Germany, India, Italy, Japan, Mexico, Spain, the U.K. and U.S., and Taiwan. At Condé Nast we value diversity of background, views and cultures. We celebrate people for their personal qualities, their skills and contributions. And we recognize the power our brands have to influence and shape culture, catalyze action and help make our world a better place for all. For more information, please visit condenast.com and follow @CondeNast and @CondeNastCareer for Twitter and @condenastcareers for Instagram.