Data Protection Manager

Full Time
London, UK
1 month ago

The Global Data Protection team is responsible and accountable for designing and maintaining Deliveroo’s global privacy program and compliance framework. This role sits within the heart of the Data Protection Team and leads the optimisation of our delivery framework, process innovation and any transformation throughout a world of complex and ever-changing privacy demands.

We are looking to hire a full-time Data Protection Manager to support the team with the management of our global data privacy program, with a particular focus on rider data processing. This area will involve working within an evolving space, surrounded by cutting-edge technologies and the benefits of collaboration with diverse teams. This role reports directly to the Global DPO and has a global reach. 

It will allow the successful candidate to work with some of the most talented and enthusiastic technical and privacy professionals in the industry, who have been nominated previously for the ‘best privacy team’ in recent awards. No two days are the same at Deliveroo and we’re looking for a like minded and experienced Data Protection Manager who will thrive in a dynamic environment.

What you'll do:
  • Oversee the accurate and timely processing of all rider data subject rights requests (including non-repetitive / complex ones) as well as the timely and appropriate response to contentious rider complaints (where necessary leading/advising on appropriate investigation, liaison with the business and drafting responses).
  • Apply strategic thinking to identify, mitigate and manage any relevant privacy related risks and issues for rider data.
  • Collaborate and form positions on rider policies, through relevant rider governance policy forums and act as the point of contact for rider privacy queries.
  • Personal data incident management for small-medium sized incidents (lead on the investigation, response to data subject and remediation advice). Support on larger incidents managed by the DPO.
  • Conduct privacy and data protection impact assessments and provide data protection advice on new business projects or retrospectively.
  • Work cross functionally on ROPA enhancements, ongoing compliance improvement initiatives across the business for the rider space.
  • Draft internal policies, procedures and guidance materials, as well as maintain documentation that illustrate data privacy compliance for rider operations.
  • Support the DPO in responding to regulatory enquiries or investigations.
  • Provide operational advice to support the compliance of cookies and SDKs on rider websites.
  • Generate accurate and well drafted management reports on the status of privacy compliance for rider operations.
  • Dotted line supervision of more junior members in the team.
What we're looking for:

The successful applicant will be a self-starter, a strong performer and a team player who is focussed on helping to ensure that the data protection team successfully delivers excellence. While liaising with the business appropriately on difficult issues, you must be able to deliver robust and appropriate advice and exercise sound judgement. We are specifically looking for:

  • Extensive / in-depth knowledge of DPA, GDPR and future legislation around data privacy, security and protection, best practice and relevant case law relevant to a commercial, tech organisation.
  • Effective communicator upwards and downwards; can align multiple teams across common goals.
  • Mentoring more junior members in team.
  • Demonstrable experience and confidence in providing sound “on the spot” privacy advice, strong practical application of expert knowledge.
  • Demonstrable strong project management, organisational and time management skills.
  • Excellent written and verbal communication skills in English and strong interpersonal skills.
  • Ability to work flexibly to accommodate other time zones when necessary.
  • Be team-focused with a passion for learning, excellence, and continuous improvement.
  • Demonstrate respect and integrity in working with others at all levels of the business.
  • Highly organised and able to manage a broad range of responsibilities in a fast paced environment.
Requirements:
  • Bachelor’s degree or equivalent from an accredited university, preferably in a legal or technical topic.
  • Minimum 4 years previous experience interpreting and applying data protection laws, including the EU’s General Data Protection Regulation (GDPR).
  • Previous experience managing and responding to complex data subject requests and contentious complaints.
  • Data Protection Associate/Manager experience and/or similar
  • (Strongly preferred) Previous experience evaluating and assessing privacy risks relating to consumer facing businesses / tech platforms.
  • (Desirable) International Association Privacy Professionals (IAPP), Certified CIPM, CIPPE, CIPT.
  • (Desirable) Experience with OneTrust, including its privacy risk assessment module.
  • (Desirable) Liaising with privacy regulators.
Why Deliveroo? 

Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.

We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.

Workplace & Benefits

At Deliveroo we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information.

Diversity

At Deliveroo, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry.

We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.

Please click here to view our candidate privacy policy.