Senior Manager, Data Privacy

Job description

As Senior Manager, Data Privacy, you will act as a trusted advisor to the business, providing pragmatic and commercially-focused privacy guidance across departments. Working closely with stakeholders globally, you will play a key role in supporting the organisation to manage personal data responsibly, maintain compliance, and fortify consistent, high-quality data protection practices across the business. What you'll do: Draft and negotiate one-off data-share agreements (e.g., artists, distribution clients, ticketing partners, co-promoters) Review, draft and negotiate vendor agreement data protection provisions Conduct and document Privacy Impact Assessments and Transfer Impact Assessments Advise business stakeholders on the compliant use of approved third-party tools and services Support the Product Design & Engineering team on the development and global implementation of internal tools M&A data privacy due diligence, contract review, and post-acquisition integration support Incident response support Review data import and export requests Support Sony Music’s live division, including negotiating vendor, location, co-promotion and IP license agreements, drafting privacy notices and marketing consent language, and collaborating with other Sony Group companies on Sony IP location-based events Advise label marketing teams on local and multi-market contests, including compliance with applicable data privacy and marketing legislation and codes of practice Support label and international marketing teams on promotional campaigns, ensuring compliance with applicable data privacy and marketing legislation and music/streaming chart rules Collaborate with the business to prepare Data Subject Access Requests responses Support the Customer Relationship Management team with data rights requests and scheduled data deletion Advise the People Experience team on local and company-wide initiatives, including internal surveys, employee tools and services, and the global careers site Support US and International litigation teams Who you are: Essential: A minimum of two years’ PQE, preferably in the Data Privacy field Handling Data Subject Access Requests Preparing Privacy Impact Assessments Drafting and negotiating data processing agreements Implementing and maintaining data privacy operations (e.g., ROPAs, PI inventories, automated processes) Experience advising digital marketi…