Job Opportunities API

🔒 Data Privacy Operations Manager 📍 London 📢 Reports into: Board Rep. Working closely with senior stakeholders, the GDPR Task Force, technical teams and ARM’s retained external DPO We're looking for a dynamic and commercially minded Data Privacy Operations Manager to take ownership of ARM's day-to-day GDPR and privacy compliance activities and help shape a culture where privacy is embedded into everything we do. In this pivotal role, you'll be at the centre of our privacy framework , leading the GDPR Task Force , handling privacy queries , coordinating DPIAs and due diligence activities, maintaining key compliance documentation, and ensuring privacy actions are followed through to completion. You'll collaborate across the business with senior leaders , technical teams , commercial stakeholders , and our Data Protection Officer (DPO) to translate regulatory requirements into practical, business-friendly solutions that support both compliance and commercial success . 🌐✨ 🚀 Why ARM? Big impact. Fast growth. Real opportunity. We’re one of the UK’s fastest-growing performance marketing agencies, with 130+ specialists across London, Amsterdam and Leeds, bringing together strategy, creativity, data and technology to drive real results. With £350m+ in media spend across TV, digital, offline and SEO, you’ll gain exposure to high-impact campaigns and work with brands like Brooks, Omaze, Dusk , and Save The Children ., alongside ambitious, high-growth scale-ups. But what really sets ARM apart is what it means for you : 🚀 Accelerate your career with clear progression and meaningful responsibility from day one 🧠 Learn from the best , with hands-on experience and industry-leading expertise around you 💡 Make a real impact , not just support from the sidelines 🤝 Be part of a collaborative, inclusive culture where your voice is heard and valued ✨ How You’ll Make an Impact Chair and coordinate the GDPR Task Force, including agendas, meeting notes, action tracking and follow-up. Manage routine data protection queries and activities from ARM teams, clients and suppliers. Coordinate and support Data Protection Impact Assessments for new projects, tools, data flows, client work, tracking technologies and data science initiatives. Review and assist with Data Processing Agreements, Data Sharing Agreements, supplier terms and client privacy requirements, escalating complex legal points to the retained DPO. Support privacy and security due diligence for clients, suppliers, platforms and data partners. Maintain and improve ARM’s RoPA, DPIA register, supplier privacy records, policy evidence and Data Privacy Accountability Framework. Support ARM’s privacy programme by maintaining policies, documentation and compliance processes. Provide privacy guidance and training on GDPR, PECR and related requirements across the business. Support privacy reviews and risk management for marketing technologies, data processing activities and regulatory compliance, working closely with technical and business teams. 🛡️ What You’ll Bring 2 to 4 years’ experience in a privacy, GDPR, compliance, legal operations, risk or governance role. Good working knowledge of UK GDPR, EU GDPR, DPA 2018 and PECR. Experience supporting DPIAs, RoPA maintenance, supplier due diligence and data processing agreement reviews. Ability to manage a privacy action tracker and coordinate multiple stakeholders across the business. Commercially pragmatic, with good judgement on when to escalate issues. Able to translate legal and privacy requirements into practical business actions. Strong Microsoft Office skills, especially Word, Excel and PowerPoint. Experience in media, advertising, analytics, SaaS, technology or data-led businesses. Familiarity with co