Job Title: Privacy Manager Europe

Location: Madrid, Spain. Hybrid / Flexible home office & office.

Reports To: European Data Privacy Officer

Position Overview:

We are seeking an experienced and detail-oriented Privacy Manager Europe to join the European Privacy team within the Ethics & Compliance function of a leading multinational pharmaceutical company.

The Privacy Manager will support the European Data Privacy Officer and the Regional Privacy Office in ensuring compliance with data protection regulations and best practices across Europe. The role will involve providing practical privacy advice to a wide range of internal stakeholders, managing privacy assessments and supporting the implementation of data protection requirements across multiple jurisdictions.

The successful candidate will work closely with Legal, Ethics & Compliance, IT, Information Security, HR, Medical, Digital, Commercial and other functional areas, as well as Data Protection Representatives across Europe.

The adecuado candidate will have a strong understanding of GDPR and European data protection legislation, excellent analytical and communication skills, and proven experience working in an international and complex organisation. Experience in the pharmaceutical industry or another highly regulated environment would be highly desirable.

Excellent English is essential, as the role involves regular interaction with international stakeholders across Europe, the UK, USA and Japan.

Key Responsibilities:

1. Data Privacy Advisory & Assessments:

- Provide practical advice to business functions on data protection and privacy matters.
- Manage and review relevant privacy assessments, including Threshold DPIAs, DPIAs, LIAs, Data Transfer Risk Assessments and Supplier Due Diligence Questionnaires.
- Support business stakeholders in identifying, assessing and mitigating privacy risks.
- Provide guidance on data governance requirements and privacy compliance.
- Support the development and implementation of privacy policies, procedures and guidelines.

2. Privacy Management & Compliance:

- Act as a support SME for Europe on the OneTrust privacy management platform.
- Coordinate and maintain Records of Processing Activities (RoPA).
- Support the management of Data Subject Requests (DSRs).
- Support privacy training, communications and new joiner induction programmes.
- Develop and maintain privacy knowledge banks, guidance documents and playbooks.
- Ensure appropriate documentation and evidence of privacy compliance is maintained.

3. Data Protection Representatives & European Coordination:





- Manage and coordinate relationships with Data Protection Representatives across Europe.
- Prepare and coordinate quarterly meetings, agendas, materials and minutes.
- Act as a bridge between the European Privacy Office and local affiliates.
- Ensure consistent implementation of privacy requirements across European markets.
- Coordinate with local stakeholders to identify and address privacy-related risks and challenges.

4. Risk Management, Monitoring & Reporting:

- Coordinate European privacy monitoring activities.
- Prepare and report relevant KPIs and KRIs relating to data protection.
- Coordinate the review and maintenance of the European Data Privacy Risk Register.
- Identify emerging privacy risks and support the development of appropriate mitigation plans.
- Provide regular updates and reporting to the European Privacy leadership team.

5. Contracts & Third-Party Privacy:

- Support the Privacy team with contract reviews and negotiations from a data protection perspective.
- Review privacy-related requirements involving third-party service providers.
- Support supplier due diligence and assessment activities.
- Work closely with Procurement, Legal, IT and Information Security teams where appropriate.

6. Regulatory & Legal Developments:

- Conduct horizon scanning and monitor changes in data protection legislation and regulatory requirements across Europe.
- Assess the potential impact of new legislation and regulatory developments on the organisation.
- Conduct legal research on data protection matters as required.
- Develop and communicate relevant guidance to internal stakeholders.

7. Incident Response & Ad-Hoc Privacy Projects:

- Provide support to the European Data Privacy Officer and Senior Privacy Manager on privacy-related incidents.
- Support Data Privacy Incident Response activities where required.
- Provide ad-hoc advice and support on complex data protection matters.
- Participate in regional and global privacy projects and initiatives.
- Support the European Privacy team with strategic and operational priorities as required.

8. Cross-Functional Stakeholder Management:

- Work closely with Legal, Ethics & Compliance, IT, Information Security, HR, Medical, Digital,



Commercial and other functional areas.
- Build strong relationships with internal and external stakeholders across multiple jurisdictions.
- Communicate complex privacy requirements in a clear, practical and business-oriented manner.
- Maintain independence and objectivity when providing privacy advice.

Key Performance Indicators (KPIs):

- Effective management and completion of privacy assessments, including DPIAs, LIAs and transfer risk assessments.
- Timely and accurate privacy monitoring and reporting, including KPIs and KRIs.
- Effective coordination with European Data Protection Representatives and local affiliates.
- Quality and timeliness of privacy advice provided to business stakeholders.
- Effective management and maintenance of RoPA, Risk Register and privacy documentation.
- Successful delivery of privacy training, awareness and communication initiatives.
- Effective support in contractual reviews, supplier assessments and privacy incidents.
- Positive stakeholder feedback and effective cross-functional collaboration.

Requirements:

- Bachelor's degree in Law, Information Security or a related field.
- Minimum 3 years of experience in Data Privacy, Data Protection or a related role.
- Strong knowledge of GDPR and European data protection regulations.
- Proven experience with DPIAs, LIAs, Data Subject Requests, RoPA and privacy advisory activities.
- Experience supporting contract reviews and third-party privacy assessments.
- Strong analytical, problem-solving and risk assessment skills.
- Excellent written and verbal communication skills.
- Ability to communicate effectively with stakeholders at different levels and across multiple countries.
- Fluent English and Italian is essential.
- Ability to work independently while also being an effective team player.
- Strong organisational skills and ability to manage multiple priorities in an international environment.
- High level of integrity, professional ethics and independence.

Preferred Qualifications:

- Professional certification such as CIPP/E, CIPM or CIPT.
- Previous experience in the pharmaceutical industry or another highly regulated sector.
- Experience working with OneTrust or similar privacy management platforms.
- Knowledge of data governance and information security requirements.
- Experience with information systems auditing, supplier audits or risk assessment and mitigation.
- Experience developing and delivering privacy or compliance training programmes.
- Experience working within global or multinational organisations.

📌 Regional Sales Lead Southern Europe (Madrid)
🏢 Adqualis
📍 Madrid