Head of Privacy

Posted 3 Days Ago
Be an Early Applicant
London, Greater London, England, GBR
Hybrid
Senior level
AdTech • Marketing Tech
The Role
Owns UNiDAYS’ global privacy program, embedding privacy by design across products and technology. Responsibilities include GDPR and international privacy compliance, audits, DPIAs, data mapping, risk remediation, incident and data-subject-rights oversight, AI governance, vendor and transfer assessments, stakeholder advice, training, and executive reporting. The role independently manages privacy processes, tools, governance, and commercial data-protection matters while partnering closely with Product, Engineering, Commercial, Information Security, and external DPO resources.
Summary Generated by Built In
UNiDAYS is a global identity and verification platform connecting brands with verified students and Gen Z audiences across more than 115 markets. We provide verification services to some of the world's largest platforms, alongside marketplace and media products for leading global brands.
We are looking for an experienced, commercially minded privacy leader to own our global privacy programme, with a particular focus on embedding privacy into our products and technology.
This is a senior, hands-on role and our sole in-house privacy position. You will work closely with Product and Engineering, advise the wider business and collaborate with an independent DPO, should that function be outsourced.
You will independently assess risks, set priorities, provide practical guidance and drive matters through to resolution. We need someone who has done this before: a self-starter with sound commercial judgement, strong execution skills and the confidence to operate autonomously while knowing when to escalate.
Job requirements
  • Qualified solicitor or lawyer with at lease 8+ years’ post-qualification experience (PQE), including substantial experience advising on privacy and data protection matters within a technology-led, product-driven or data-intensive business.
  • A proven track record of independently owning a privacy programme, conducting audits, identifying risks and delivering remediation.
  • Demonstrated experience embedding privacy by design into live products and working closely with Product and Engineering.
  • Deep expertise in UK and EU GDPR, with working knowledge of international privacy regimes.
  • Strong technical understanding of data flows, systems architecture and APIs.
  • Excellent commercial judgement, communication and presentation skills, with the confidence to influence senior stakeholders.
  • A self-directed, hands-on approach, with proven ability to manage competing priorities and deliver results without a supporting privacy team.
  • Experience with OneTrust or a similar privacy management platform.
Highly desirable: Experience with identity verification, digital identity, children's or young people's data, advertising and audience data, or implementing AI-enabled processes.
Recognised privacy certification (such as CIPP/E or CIPM) is advantageous but not essential.
Job responsibilities
Product privacy and privacy by design
  • Partner with Product and Engineering to embed privacy into product design, development and launches.
  • Assess new products, features and technologies, providing practical, commercially viable solutions.
  • Advise on data flows, lawful bases, consent, retention and other privacy requirements.
  • Lead privacy considerations for identity verification, younger users (13+) and age assurance, including the Age Appropriate Design Code and relevant emerging regulations.
Privacy risk, assurance and governance
  • Independently conduct risk-based privacy audits and assessments across products, systems, vendors and operations.
  • Own core privacy governance, including DPIAs, RoPAs, policies, notices, data mapping and international transfers.
  • Maintain a privacy risk register, identify compliance gaps and drive remediation through to completion.
  • Oversee data subject rights, complaints and privacy incidents, working with Information Security and any appointed external DPO.
  • Lead operational AI governance, including AI risk assessments, internal AI use standards and EU AI Act readiness.
  • Maintain and improve the global privacy programme, ensuring compliance with UK and EU GDPR, PECR and other applicable international privacy laws.
Commercial advice and stakeholder engagement
  • Serve as the primary privacy adviser across the business, providing timely, clear and commercially grounded guidance.
  • Support Commercial and Partnerships on data protection terms, customer requirements and privacy assurance requests.
  • Deliver engaging privacy training and communicate confidently across the organisation, including at company-wide forums.
  • Provide concise, actionable reporting to the General Counsel, executive leadership and, where required, the Board.
Operational excellence
  • Develop scalable privacy processes, playbooks and technology-enabled workflows, using tools such as OneTrust and AI to improve efficiency.
  • Independently manage competing priorities, establish clear accountability and ensure issues are followed through to resolution.
What success looks like
  • Privacy is embedded in Product and Engineering decisions from the outset.
  • Material privacy risks are identified proactively, clearly reported and effectively managed.
  • Audits and assessments result in meaningful improvements, with remediation driven to completion.
  • The business receives timely, practical advice that supports commercial objectives.
  • The privacy function operates independently and effectively, with leadership confident that priorities are being managed without constant oversight.

Benefits
This is your opportunity to Join the world’s largest student verification network and help shape the future of how brands connect with the next generation. We engage a community of 23M+ verified students and graduates across 115 markets, making us a truly global platform. Our brand is a powerhouse in the UK, and we’re rapidly accelerating our presence worldwide—especially in the US, Germany, India, France, Canada, and Australia.
We partner with 850+ of the world’s biggest brands, bringing their products and services to the hearts and minds of tomorrow’s professionals—driving engagement, building affinity, and delivering real results.
We offer a fast-paced, fun, and social working environment where you can truly make an impact. We believe work should enhance and complement your life, which is why we provide a hybrid working model. You will work together in person a minimum of 2 days per week and work from home for up to 3 days a week. 
We work hard at UNiDAYS, and we believe in fair compensation for that hard work. That’s why we’re proud to offer all employees full access to our comprehensive benefits package.
Our perks include:
25 days holiday per year increasing with length of service, plus bank holidays
Competitive salaries
4pm finishes every Friday
Company pension scheme
Private health insurance (BUPA)
Dental Insurance (BUPA)
Income protection policy
Life assurance policy
Employee Assistance Program
Enhanced parental leave pay
Regular team building activities
£150 pounds towards your home office set up
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status or disability status.

Skills Required

  • Typically 8+ years of privacy and data protection experience
  • Senior responsibility in a technology-led, product-driven, or data-intensive business
  • Experience independently owning a privacy program
  • Experience conducting audits, identifying risks, and delivering remediation
  • Experience embedding privacy by design into live products
  • Experience working closely with Product and Engineering teams
  • Deep expertise in UK and EU GDPR
  • Working knowledge of international privacy regimes
  • Strong technical understanding of data flows, systems architecture, and APIs
  • Excellent commercial judgment, communication, presentation, and stakeholder-influencing skills
  • Self-directed, hands-on approach with the ability to manage competing priorities autonomously
  • Experience with OneTrust or a similar privacy management platform
  • Experience with identity verification, digital identity, younger users’ data, advertising and audience data, or AI-enabled processes
  • Legal qualification or recognized privacy certification such as CIPP/E or CIPM
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Nottingham
303 Employees
Year Founded: 2011

What We Do

UNiDAYS is the world’s largest Student Affinity Network. With over 29 million verified members across 115 markets, we take 800 of the biggest brands into the hearts and minds of tomorrow’s professionals. UNiDAYS supports, enables and inspires young people to be their best selves, powering next-gen learning, earning and retail experiences. Co-founded by Josh Rathour and CEO, Jon Hawley, UNiDAYS has an awesome team of over 250 talented disruptors, innovators and entrepreneurs working from both their homes and our company campuses in Nottingham (our HQ), London, New York and Sydney. UNiDAYS works with all the top brands including Apple, Amazon, Samsung, Nike, adidas, Microsoft, JD Sports, Forever 21, H&M, SHEIN, M&S, Disney and ASOS. Our student and graduate members have spent more than $5bn through the network since 2018. At UNiDAYS you will be supported and nurtured to become the best version of yourself. We are growing rapidly and need talented individuals with passion, initiative, drive and determination. We are always looking for great people. If you fit the bill, we’d love to hear from you.

Similar Jobs

Hybrid
2 Locations
1517 Employees

Freetrade Logo Freetrade

Head of Security, Privacy & IT

Blockchain • Fintech • Information Technology • Software • Financial Services
Hybrid
London, Greater London, England, GBR
234 Employees
In-Office
London, Greater London, England, GBR
1095 Employees

Similar Companies Hiring

MFour Data Research Thumbnail
Marketing Tech • Software
Irvine, CA
98 Employees
Golden Pet Brands Thumbnail
Digital Media • eCommerce • Information Technology • Marketing Tech • Pet • Retail • Social Media
El Segundo, California
178 Employees
Blee Thumbnail
Artificial Intelligence • Marketing Tech • Software
New York, New York
30 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account