Senior Data Privacy Engineer(MJ003967)

Overview

As the Europe-based lead within the InfoSec team, you own regulatory privacy compliance and act as the security and implementation interface to Legal and Government Relations. You will manage external audits, translate GDPR requirements into technical solutions, and drive privacy programs across product and engineering. You’ll coordinate data incident response and cross-functional efforts to ensure GDPR-ready security and privacy operations. This role offers impact across a global, fast-evolving travel group with regional regulatory pressures.

Pay / Benefits

• flexible working arrangement
• global opportunities
• career growth
• international team environment

Responsibilities

• Serve as Europe’s InfoSec local interface, coordinating with Legal and GR and owning external audit management
• Conduct privacy risk analysis and monitor regulatory developments to identify compliance gaps and improvements
• Lead GDPR-focused compliance programs and technical solutions, including DSR systems and privacy transformations
• Translate European legal requirements into actionable technical specifications for HQ teams
• Oversee annual surveillance reviews of UK ISO 27001 and Europrivacy; manage audits and ongoing security/privacy management within GDPR
• Coordinate data incidents locally with cross-functional teams, perform security impact assessments, and support statutory notifications with technical facts
• Drive cross-functional, cross-time-zone collaboration to implement compliance at system level
• Provide day-to-day compliance guidance, including risk assessments, vendor reviews, and cross-border data transfer assessments

Key requirements

• 5+ years in data privacy, compliance, or information security in Europe
• Strong understanding of GDPR and UK GDPR fundamentals (DSRs, cross-border transfers, DPIAs)
• Experience implementing GDPR or privacy solutions
• Ability to translate legal requirements into practical technical solutions for Product and Engineering
• Experience coordinating data incidents and assisting with statutory notifications
• Excellent written and verbal communication
• Comfortable working independently in a distributed, cross-cultural team

• strong communication
• cross-functional collaboration
• self-motivation and accountability
• GDPR implementation or privacy solution design
• DSR systems and privacy program tooling
• privacy risk assessments and DPIAs

…