Governance Privacy Analyst

Gymshark; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Performance-based Bonus

Healthcare

25 days holiday

Pension scheme

Flexible benefits

Employee discount

Wellbeing support

Family leave

Life assurance

Gym membership The Lifting Club

EV charging points

Lunch provision

Job summary

Gymshark is seeking a Governance & Privacy Analyst to protect trust by ensuring personal data is handled responsibly across the business. You will own privacy operations, advise across teams, and help shape data governance.

You will work on DPIAs, DSARs, policies, and AI governance, collaborating with Legal, Security and Tech to embed privacy-by-design and stay aligned with GDPR and PECR.

Qualifications

• Proven experience in Data Privacy, Data Protection, Governance or Compliance.
• Hands-on experience managing DSARs, DPIAs, privacy incidents and data protection processes.
• Strong knowledge of GDPR, PECR and other global data protection regulations.
• Experience developing, maintaining and improving governance policies, frameworks and procedures.
• Ability to interpret regulation and translate it into practical guidance.

Responsibilities

• Own and manage day-to-day privacy operations, including DSARs and data breach processes.
• Maintain and improve governance documentation like privacy notices and policies.
• Support DPIAs and privacy risk assessments across the business.
• Embed privacy-by-design principles across projects and initiatives.
• Provide guidance on data handling, governance and regulatory requirements.

Skills

Privacy operations

DSAR management

DPIAs

Governance policies

Regulatory interpretation

Stakeholder management

Analytical skills

Continuous improvement

AI governance interest

Job description

OVERVIEW:

At Gymshark, data is more than information, it's trust. As our Governance & Privacy Analyst, you'll play a key role in protecting that trust by helping us ensure personal data is handled responsibly, ethically and in line with evolving global regulations.

Sitting within our Data Governance team, you'll work at the intersection of privacy, technology, compliance and business operations. You'll be a trusted advisor across the organisation, driving best practice, supporting privacy initiatives and helping to shape how data is governed across Gymshark.

From managing privacy operations and supporting compliance programmes to influencing stakeholders and preparing for emerging regulations, you'll help keep our data practices robust, scalable and future-ready.

WHAT YOU'LL BE DOING:

• Owning and managing day-to-day privacy operations, including individual rights requests (DSARs), privacy queries and data breach processes.
• Maintaining and improving key privacy and governance documentation such as privacy notices, processing agreements, policies and procedures.
• Supporting Data Protection Impact Assessments (DPIAs) and wider privacy risk assessments across the business.
• Partnering with teams across Gymshark to embed privacy-by-design principles into projects, processes and new initiatives.
• Acting as a trusted subject matter expert, providing guidance on data handling, governance and regulatory requirements.
• Supporting compliance with GDPR, PECR and other relevant privacy regulations across multiple territories.
• Helping to manage Records of Processing Activities (RoPA), retention schedules and governance controls.
• Delivering engaging education and awareness initiatives to strengthen data privacy knowledge across the business.
• Supporting governance reviews, privacy audits and continuous improvement activities.
• Assessing privacy risks associated with new technologies, vendors and business processes.
• Collaborating with Legal, Security and Technology teams to ensure data is managed safely and responsibly.
• Supporting Gymshark's evolving approach to AI governance, data ethics and emerging regulatory requirements.

WHAT YOU'LL NEED:

• Proven experience working within Data Privacy, Data Protection, Governance or Compliance.
• Hands‑on experience managing DSARs, DPIAs, privacy incidents and data protection processes.
• Strong working knowledge of privacy legislation such as GDPR, PECR and other global data protection regulations.
• Experience developing, maintaining and improving governance policies, frameworks and procedures.
• The ability to interpret regulation and translate it into practical business guidance.
• Excellent stakeholder management skills with the confidence to influence and collaborate across all levels of the organisation.
• Strong analytical and problem‑solving skills, with the ability to investigate issues and drive solutions through to completion.
• A proactive mindset with a passion for continuous improvement and operational excellence.
• The ability to balance commercial objectives with privacy, compliance and risk management requirements.
• A genuine interest in emerging technologies, data ethics and areas such as AI governance and digital privacy.
• Experience working alongside Legal, Technology, Security or Risk teams would be highly advantageous.

CLOSING DATE:

Monday 24th August 2026

LOCATION:

Please note this is a hybrid role and requires the successful candidate to attend at least 3 days a week in GSIQ, Solihull, UK.

BELONGING AT GYMSHARK.

We're an equal opportunities employer, and for us that means we always strive to be as inclusive as possible in all aspects of employment, right from your application. We're committed to finding reasonable adjustments* for candidates with specific needs or have a disability during our recruitment process, and all applicants will be considered fairly and equally. We do not tolerate discrimination of any kind. *If you’d like to request a reasonable adjustment please email [e-mail].

ABOUT US.

We're here to unite the conditioning community. We believe that putting the sweat in today, prepares us for tomorrow. So, we give people the tools they need to reach further, go faster, be stronger. We celebrate those who show up – for themselves – to be their physical or mental best, whatever that means for them. It’s what we want for our community, and our team. A team that’s growing rapidly around the world. A collective of talented individuals working together to invent Gymshark’s future. Our plans are ambitious, and we're looking for people who want to join us for the ride – our growth will be your growth.

THE PERKS.

Standard benefits include:

• Performance-based Bonus opportunity
• Funded Healthcare benefit
• 25 days holiday, additional day for your birthday & Bank Holidays
• Contributory Employer pension scheme
• Flexible benefits programme – including salary sacrifice EV scheme, dental insurance, cycle to work, tech scheme, holiday trading
• Gymshark Employee Discount & long service awards
• Access to High Street cashback and discounts
• Financial, Physical and Mental Wellbeing Support
• Enhanced Family Leave package
• Life Assurance

Office location specific benefits include (IQ):

• Gym Membership to The Lifting Club (LC)
• Onsite lunch provision & coffee bars
• EV charge points available

Office location specific benefits include (LDN):

• Funded multi-site fitness membership

Note: The bonus program and benefits have certain eligibility requirements. Gymshark reserves the right to amend these programs in whole or in part at any time without advance notice.