Data Protection Privacy Lead

Murphy Geospatial•London, CA

17h•Remote

About The Position

Woolpert Europe’s vision is to build and scale Europe’s leading provider of integrated AEG (Architecture, Engineering, and Geospatial) solutions — delivering connected Architectural, Engineering and Geospatial digital services/products to enterprise and infrastructure clients such as Heathrow Airport, Network Rail, ESMC, Deutsche Bahn, National Mapping Agencies, Google, and Amazon. We are seeking a highly skilled and proactive Data Privacy Lead for the EMEA region to oversee and manage data protection and privacy compliance across multiple jurisdictions. This role requires expertise in GDPR, as well as a strong understanding of regional data privacy laws and practices. The successful candidate will play a key role in shaping and implementing privacy strategies, ensuring regulatory compliance, and supporting business operations with practical, risk-based advice.

Requirements

Degree in Law, Compliance, Data Protection, or a related field.
Minimum 3-5 years of experience in data privacy, with a strong focus on GDPR.
In-depth knowledge of EMEA data protection laws and regulatory frameworks.
Professional certification preferred (e.g., CIPP/E, CIPM, or similar).
Experience working in a multinational environment with cross-border data flows.
Strong analytical, communication, and stakeholder engagement skills.
Fluent in English; additional European languages are a plus.

Nice To Haves

Strategic thinker with a hands-on, pragmatic approach.
Ability to translate complex legal requirements into actionable business practices.
Comfortable working in a fast-paced, matrixed organization.
High integrity and commitment to ethical standards.

Responsibilities

Lead the development and execution of data privacy strategies across the EMEA region.
Ensure ongoing compliance with GDPR and other applicable data protection laws.
Act as a subject matter expert and advisor to business units on privacy-related matters.
Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs).
Manage and respond to data subject access requests (DSARs) and regulatory inquiries.
Monitor changes in privacy legislation across EMEA and assess business impact.
Collaborate with Legal, IT, HR, and security teams to embed privacy by design and default.
Develop and deliver privacy training and awareness programs across the region.
Maintain records of processing activities and oversee data mapping initiatives.
Support incident response and breach notification processes in line with regulatory requirements.