Group Data Compliance Manager

PureGym People•Los Angeles, CA

5d•Hybrid

About The Position

The Group Data Compliance Manager leads and shapes PureGym’s global privacy and data protection strategy across its operating markets. The role incorporates the responsibilities of the Designated Data Protection Officer and sits within the wider Health & Safety Team. It provides expert, independent oversight of data protection compliance, helping the business meet legal and regulatory obligations while supporting growth, innovation, and risk-based commercial decisions. The postholder acts as the primary privacy advisor, leads regulator engagement, oversees the Group’s privacy governance framework, and promotes accountability and responsible data use. Supported by the Data Protection Support Officer, the role provides strategic leadership for data compliance and ensures privacy risks are identified, managed, and reported across the Group. The role is based remotely or hybrid from either London or Leeds, with a minimum of two days per week in the office and international travel as required. It is a full-time, permanent position reporting to the Group Head of Health & Safety.

Requirements

Significant experience leading data protection and privacy programmes in a multi-jurisdictional environment.
Demonstrable experience acting as a Data Protection Officer or senior privacy professional.
Expert knowledge of UK GDPR, EU GDPR, Swiss FADP, applicable US privacy legislation, and international transfer requirements.
Experience managing regulatory interactions and investigations.
Strong understanding of privacy-by-design principles.
Experience conducting DPIAs and privacy risk assessments.
Experience managing complex data subject rights requests and complaints.
Experience reviewing supplier privacy compliance arrangements.
Strong knowledge of information governance and records management practices.
Ability to balance regulatory compliance with commercial objectives.
Strong stakeholder management and influencing skills.
Confidence advising senior leadership and executive teams.
Excellent communication and presentation skills.
Strong attention to detail and organisational capability.
Ability to work independently while building collaborative partnerships.
High levels of integrity, accountability, and professional judgement.
Lives and breathes PureGym’s values.
Able to work hybrid with a minimum of two days a week in the office and travel internationally as required.

Responsibilities

Lead the Data Protection Officer function.
Provide regulatory oversight and manage engagement with regulators.
Manage the privacy compliance programme.
Conduct and oversee Data Protection Impact Assessments.
Handle data subject rights requests and complaints.
Lead governance of cross-border personal data transfers.
Manage third-party risk and review PureGym providers and data processors.
Manage incidents and data breaches.
Maintain Group policies and standards.
Lead training, awareness, and privacy culture initiatives.
Maintain records of processing activities (ROPA), retention schedules, and data mapping activities.
Advise the business on privacy and data protection matters, including balancing compliance with commercial objectives.