Data Privacy Compliance Manager (12-month FTC) in London

Our Global Privacy Team sits in London and provides privacy and data protection support to the WMG business, including privacy and data protection advice and supports WMG’s compliance with its accountability obligations under applicable privacy and data protection laws. The Team works closely with all departments within the UK, U.S. and with affiliates around the world to help deliver on ambitious technology and data driven music-related business goals. This is a great opportunity to work with our Global Data Privacy Team members to design, implement and monitor the delivery of key compliance activities. The work will be fast‑paced and offer the prospect of enhancing our approach to key privacy and data protection compliance requirements.

Responsibilities

• Lead on the management and update our existing GDPR Article 30 Records of Processing Activities and similar requirements for documenting personal data processing activities.
• Create new records of processing activities for processing activities carried out outside the EEA and the UK.
• Manage our DPIA and risk assessment process, including collating information and triaging processing activities that require assessment and performing assessments as required.
• Perform Article 35 DPIAs where required.
• Manage and enhance our Data Subjects Rights process for EU, UK, US and the rest of the world, including updating and maintaining our Data Subjects Rights Log and responding to data subjects when required.
• Identify any areas for improvement with privacy and data protection accountability requirements and update our approach to implementing accountability requirements.
• Manage our suite of privacy and data protection policies and playbooks, including creating and updating privacy and data protection policy documents and processes.
• Oversee the implementation of our suite of privacy and data protection policies and playbooks.
• Create and manage updates to privacy documents, templates and internal policies and procedures, making changes to them as required.
• Work with the Corporate Comms team to create privacy‑led communications to WMG’s businesses.
• Manage the delivery of our Global Privacy and Data Protection Training Program and create new training materials when required.
• Creating and managing records of personal data incidents which will require working across our organisation and particularly with IT, information security and Warner Music Group affiliates.
• Be responsible for responding to personal data incidents.
• Arranging privacy committee meetings, and drafting and creating committee papers and determining matters for review by committees.
• Identifying relevant privacy developments, undertaking research and updating the Privacy Team on new and relevant data privacy developments.
• Supporting the Global Data Privacy Team with governance work, including risk escalation.
• Supporting the Global Data Privacy Team with the ongoing development of our global data privacy strategy and identifying key areas of privacy compliance to contribute to.

About you

• Should have a privacy or data protection qualification. IAPP CIPM qualification in addition to one other would be preferable.
• Prior work in a DPO role or similar privacy compliance manager role would be preferable.
• Good understanding of the GDPR PECR, and awareness of other privacy and data protection legal requirements operating in the US and the rest of the world.
• You will have significant practical experience with leading and delivering privacy and data protection compliance, ideally from working in a multi‑national organisation.
• Skilled in identifying, analysing, managing and reporting on privacy and data protection risks and accountability requirements.
• Previous experience leading on delivering successful training on privacy and data protection matters.
• You will be an effective administrator of privacy compliance technologies, such as the OneTrust Platform.
• You should be effective at communicating with a wide range of partners, both in writing and verbally, and be able to explain data privacy and protection issues to business team members.
• Will be experienced with delivering work independently, and also with collaborating as part of a team when required.
• Experience liaising with Data Protection Authorities and managing registrations with Data Protection Authorities.

This position requires a minimum of 3 days per week in the office.

Equal Employment Opportunity Statement

WMG is committed to inclusion and diversity in all aspects of our business. We are proud to be an equal opportunity workplace and will evaluate qualified applicants without regard to race, religion or belief, age, sex, sexual orientation, gender, gender identity or gender reassignment, marital or civil partnership status, disability, pregnancy, childbirth or any other characteristic protected by law.