Unidays Logo

Unidays

Head of Privacy

Posted 15 Days Ago
Be an Early Applicant
Hybrid
London, Greater London, England, GBR
Senior level
Hybrid
London, Greater London, England, GBR
Senior level
Owns UNiDAYS’ global privacy program, embedding privacy by design across products and technology. Responsibilities include GDPR and international privacy compliance, audits, DPIAs, data mapping, risk remediation, incident and data-subject-rights oversight, AI governance, vendor and transfer assessments, stakeholder advice, training, and executive reporting. The role independently manages privacy processes, tools, governance, and commercial data-protection matters while partnering closely with Product, Engineering, Commercial, Information Security, and external DPO resources.
The summary above was generated by AI
UNiDAYS is a global identity and verification platform connecting brands with verified students and Gen Z audiences across more than 115 markets. We provide verification services to some of the world's largest platforms, alongside marketplace and media products for leading global brands.
We are looking for an experienced, commercially minded privacy leader to own our global privacy programme, with a particular focus on embedding privacy into our products and technology.
This is a senior, hands-on role and our sole in-house privacy position. You will work closely with Product and Engineering, advise the wider business and collaborate with an independent DPO, should that function be outsourced.
You will independently assess risks, set priorities, provide practical guidance and drive matters through to resolution. We need someone who has done this before: a self-starter with sound commercial judgement, strong execution skills and the confidence to operate autonomously while knowing when to escalate.
Job requirements
  • Qualified solicitor or lawyer with at lease 8+ years’ post-qualification experience (PQE), including substantial experience advising on privacy and data protection matters within a technology-led, product-driven or data-intensive business.
  • A proven track record of independently owning a privacy programme, conducting audits, identifying risks and delivering remediation.
  • Demonstrated experience embedding privacy by design into live products and working closely with Product and Engineering.
  • Deep expertise in UK and EU GDPR, with working knowledge of international privacy regimes.
  • Strong technical understanding of data flows, systems architecture and APIs.
  • Excellent commercial judgement, communication and presentation skills, with the confidence to influence senior stakeholders.
  • A self-directed, hands-on approach, with proven ability to manage competing priorities and deliver results without a supporting privacy team.
  • Experience with OneTrust or a similar privacy management platform.
Highly desirable: Experience with identity verification, digital identity, children's or young people's data, advertising and audience data, or implementing AI-enabled processes.
Recognised privacy certification (such as CIPP/E or CIPM) is advantageous but not essential.
Job responsibilities
Product privacy and privacy by design
  • Partner with Product and Engineering to embed privacy into product design, development and launches.
  • Assess new products, features and technologies, providing practical, commercially viable solutions.
  • Advise on data flows, lawful bases, consent, retention and other privacy requirements.
  • Lead privacy considerations for identity verification, younger users (13+) and age assurance, including the Age Appropriate Design Code and relevant emerging regulations.
Privacy risk, assurance and governance
  • Independently conduct risk-based privacy audits and assessments across products, systems, vendors and operations.
  • Own core privacy governance, including DPIAs, RoPAs, policies, notices, data mapping and international transfers.
  • Maintain a privacy risk register, identify compliance gaps and drive remediation through to completion.
  • Oversee data subject rights, complaints and privacy incidents, working with Information Security and any appointed external DPO.
  • Lead operational AI governance, including AI risk assessments, internal AI use standards and EU AI Act readiness.
  • Maintain and improve the global privacy programme, ensuring compliance with UK and EU GDPR, PECR and other applicable international privacy laws.
Commercial advice and stakeholder engagement
  • Serve as the primary privacy adviser across the business, providing timely, clear and commercially grounded guidance.
  • Support Commercial and Partnerships on data protection terms, customer requirements and privacy assurance requests.
  • Deliver engaging privacy training and communicate confidently across the organisation, including at company-wide forums.
  • Provide concise, actionable reporting to the General Counsel, executive leadership and, where required, the Board.
Operational excellence
  • Develop scalable privacy processes, playbooks and technology-enabled workflows, using tools such as OneTrust and AI to improve efficiency.
  • Independently manage competing priorities, establish clear accountability and ensure issues are followed through to resolution.
What success looks like
  • Privacy is embedded in Product and Engineering decisions from the outset.
  • Material privacy risks are identified proactively, clearly reported and effectively managed.
  • Audits and assessments result in meaningful improvements, with remediation driven to completion.
  • The business receives timely, practical advice that supports commercial objectives.
  • The privacy function operates independently and effectively, with leadership confident that priorities are being managed without constant oversight.

Benefits
This is your opportunity to Join the world’s largest student verification network and help shape the future of how brands connect with the next generation. We engage a community of 23M+ verified students and graduates across 115 markets, making us a truly global platform. Our brand is a powerhouse in the UK, and we’re rapidly accelerating our presence worldwide—especially in the US, Germany, India, France, Canada, and Australia.
We partner with 850+ of the world’s biggest brands, bringing their products and services to the hearts and minds of tomorrow’s professionals—driving engagement, building affinity, and delivering real results.
We offer a fast-paced, fun, and social working environment where you can truly make an impact. We believe work should enhance and complement your life, which is why we provide a hybrid working model. You will work together in person a minimum of 2 days per week and work from home for up to 3 days a week. 
We work hard at UNiDAYS, and we believe in fair compensation for that hard work. That’s why we’re proud to offer all employees full access to our comprehensive benefits package.
Our perks include:
25 days holiday per year increasing with length of service, plus bank holidays
Competitive salaries
4pm finishes every Friday
Company pension scheme
Private health insurance (BUPA)
Dental Insurance (BUPA)
Income protection policy
Life assurance policy
Employee Assistance Program
Enhanced parental leave pay
Regular team building activities
£150 pounds towards your home office set up
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status or disability status.

Unidays London, England Office

Epworth House, 25 City Road, London, United Kingdom, EC1Y 1AA

Similar Jobs

19 Days Ago
Hybrid
London, Greater London, England, GBR
Senior level
Senior level
Biotech • Pharmaceutical
Leads Avalere Health’s global compliance, data privacy, and AI compliance programs. Advises senior stakeholders on regulatory and reputational risk, manages privacy processes, oversees anti-bribery controls and third-party due diligence, coordinates investigations and incident responses, maintains policies and training, and reports material risks to leadership. The role also supervises team members and partners with Legal, Information Security, Technology, People, and business teams to implement practical governance controls.
Top Skills: Eu Ai ActEu GdprHipaaUk Gdpr
27 Days Ago
Hybrid
London, Greater London, England, GBR
Expert/Leader
Expert/Leader
Blockchain • Fintech • Information Technology • Software • Financial Services
Lead security, privacy, and IT strategy for a growing fintech: own application and cloud security, incident detection and response, DLP, GDPR compliance, identity and workplace IT, and govern safe AI adoption while building and advising cross-functional teams.
Top Skills: AIApplication SecurityCloud SecurityDirectory ServicesDlpIdentity And Access Management (Iam)Incident Detection & ResponseMonitoring/AlertingSsoVpnZtna (Zero Trust Network Access)
2 Months Ago
In-Office
London, Greater London, England, GBR
Expert/Leader
Expert/Leader
Insurance
Lead global privacy strategy, ensure compliance with various data protection laws, manage data privacy issues, and collaborate across teams on governance.
Top Skills: CcpaCpraData Processing AgreementsData Protection Impact AssessmentsData Protection LawGdprHipaaPipa

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account