Program Manager Privacy Maturity Program (PMP) (GDPR / Data Privacy)

Project overview

The client is looking for a Program Manager specialized in personal data protection (GDPR / Data Privacy).

This is a senior profile combining two areas of expertise: managing complex transformation programs and solid operational experience in GDPR compliance, ideally gained as a Privacy consultant or DPO.

The consultant will be responsible for managing a cross-functional program within the client and the group, while also taking direct responsibility for certain sub-projects.

Program Manager capable of taking over an already initiated international GDPR transformation, managing its governance, coordinating numerous stakeholders, and personally handling certain compliance projects.

It is therefore essential to have previously led Privacy transformation programs in international groups, particularly in the airline, banking, insurance, telecom sectors, or in large consulting firms.

The most differentiating criterion will be the combination of solid Privacy/GDPR experience, true program leadership, and a minimum C1 level of English.

The client launched a program called Y in 2024, following a maturity audit conducted by an external consulting firm.

The objective is to strengthen the group's level of compliance with personal data protection, particularly with regard to GDPR.

The main objectives are:

The maturity model in the document is based on several dimensions: strategy, organization, policies, training, audits, impact assessments, Privacy by Design, and processing register.

Second responsibility – Direct management of Privacy sub-projects

The consultant will not only be a Program Manager but will also personally manage certain projects.

The document specifically mentions the DPIA (Data Protection Impact Assessment) project, which is being taken over by the current program manager.

For the projects assigned to them, they will need to:

The exact sub-projects to be managed in 2027 are not all defined in the RFP.

Profile sought

Personal qualities sought

Senior Privacy / GDPR Program Manager, from consulting or a large international group, having previously managed personal data compliance transformation programs.

• Improve the group's maturity in data protection.
• Reduce legal, regulatory, and operational risks related to personal data.
• Harmonize practices between Y, X, and the holding company.
• Strengthen governance and clarify responsibilities.
• Improve internal policies, procedures, and processes.
• Develop and optimize Privacy compliance management tools.
• Deploy common practices across several group entities.
• Define objectives and scope in agreement with the steering committee.
• Develop schedules, budget forecasts, and resource plans.
• Form and coordinate project teams.
• Assign responsibilities.
• Supervise operational work.
• Identify risks and resolve issues.
• Produce expected deliverables.
• Obtain approval for key decisions from the steering committee.
• Ensure the quality of results and the successful closure of projects.
• Leadership: ability to rally teams without direct hierarchical authority.
• Communication: excellent written and oral expression.
• Emotional intelligence: ease in a multicultural environment.
• Adaptability: ability to work with different organizations and methods.
• Critical thinking: ability to question existing practices.
• Negotiation: skill in converging divergent interests.
• Conflict resolution: ability to handle sensitive situations.
• Strategic vision: ability to link regulatory issues to group objectives.
• Teamwork: cooperation with numerous stakeholders of different nationalities.

Requirements

• Concrete experience in managing cross-functional programs.
• Significant experience as a DPO or Privacy consultant.
• Good operational knowledge of GDPR and compliance processes.
• Ability to coordinate multiple projects simultaneously.
• Experience with high-level steering committees.
• Excellent command of English.
• Ease in international and multicultural environments.

Project details

• Start: 03/01/2027
• Duration: 12 mois renouvelable
• Remote: hybrid
• Location: Île-de-France, France, FR
• Languages: French