Senior Manager, Privacy Operations
At Aristocrat, the Senior Privacy Operations Manager will be critical to ensuring privacy practices are effectively coordinated in all business areas. This is an outstanding opportunity to join a motivated team where knowledge will directly impact global privacy operations and contribute meaningfully to achievements.
The role requires leading all communication channels for the Global Privacy Team, including intake, triage, prioritisation, and handling of blocking issues in requests. It also involves owning and completing the privacy assessment lifecycle, including PIAs, DPIAs, LIAs, TIAs, and ad hoc privacy reviews. The Senior Privacy Operations Manager will lead Data Subject Right Request (DSRR) operations, ensuring requests are managed appropriately across teams, and coordinate third-party privacy risk management operations, including vendor reviews and remediation tracking. Support and operationalisation of enterprise privacy policies by defining requirements, controls, and implementation expectations is also key. The role involves developing and maintaining privacy standards, procedures, and operational playbooks to ensure consistency across the organisation, and partnering with business collaborators to implement and manage privacy operational requirements across products, initiatives, and workflows. Driving the execution of the Enterprise Data Privacy Program, ensuring alignment with strategic priorities, and monitoring privacy compliance through metrics and reporting, tracking assessment volumes, SLAs, risks, and trends are also core responsibilities. Maintaining the Record of Processing Activities (ROPA), ensuring completeness, accuracy, and audit readiness, and continuously improving privacy operations workflows, tooling usage (e.g., TrustArc), and intake processes to improve efficiency and scalability are expected. The Senior Privacy Operations Manager will independently lead projects, timelines, and results, providing clear updates to collaborators and leadership.
- Lead all communication channels for the Global Privacy Team, including intake, triage, prioritisation, and handling of blocking issues in requests.
- Own and complete the privacy assessment lifecycle, including PIAs, DPIAs, LIAs, TIAs, and ad hoc privacy reviews.
- Lead Data Subject Right Request (DSRR) operations, ensuring requests are managed appropriately responses across teams.
- Coordinate third-party privacy risk management operations, including vendor reviews and remediation tracking.
- Support and operationalise enterprise privacy policies by defining requirements, controls, and implementation expectations.
- Develop and maintain privacy standards, procedures, and operational playbooks to ensure consistency across the organisation.
- Partner with business collaborators to implement and manage privacy operational requirements across products, initiatives, and workflows.
- Drive the execution of the Enterprise Data Privacy Program, ensuring alignment with strategic priorities.
- Monitor privacy compliance through metrics and reporting, tracking assessment volumes, SLAs, risks, and trends.
- Maintain the Record of Processing Activities (ROPA), ensuring completeness, accuracy, and audit readiness.
- Continuously improve privacy operations workflows, tooling usage (e.g., TrustArc), and intake processes to improve efficiency and scalability.
- Independently lead projects, timelines, and results, providing clear updates to collaborators and leadership.
- Significant recent experience and expert knowledge of UK data protection legislation (CPRA, HIPAA, COPPA) and related frameworks (required).
- Experience providing advice and mentorship on data protection risks and compliance matters to senior collaborators (required).
- Strong understanding of data protection governance, risk management, and regulatory frameworks (required).
- Experience leading or supporting complex regulatory, transformation, or data-related change programs, preferably within the retail sector (preferred).
- Proficiency in managing and responding to data protection incidents (required).
- Outstanding attention to detail and the capacity to work autonomously in a dynamic setting (required).
- Familiarity with privacy management platforms (e.g., TrustArc, OneTrust) and workflow tools (e.g., Smartsheet, Monday.com) (required).
- Strong project management skills with the ability to prioritise multiple tasks on time (required).
- Solid organisational and analytical capabilities combined with careful attention to detail (required).
- Ability to work autonomously and advance projects in a fast-paced environment (required).
- Offer a comprehensive pay and benefits package designed to stay competitive in the market, support wellbeing, and recognise contribution to success.
- Specific compensation package will be determined by factors such as skills, experience, qualifications, and location.
- Depending on role and location, may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.
- Specific details about compensation and benefits for this position will be discussed during the recruitment process.
Aristocrat Leisure Limited is an Australian gaming and technology company and one of the world's largest providers of gambling products. Listed on the Australian Securities Exchange and headquartered in Sydney, it designs and manufactures electronic gaming machines and casino-management systems, and runs sizeable online real-money gaming (Aristocrat Interactive) and mobile games (Pixel United) businesses. Founded in 1953, the group employs more than 7,000 people across over 20 locations worldwide. It is the largest gaming-machine manufacturer in Australia and among the biggest slot-machine makers globally.