Learn more at Sitecore.com http://Sitecore.com.
About the Role
Sitecore is seeking a Data Protection Operations Manager to support the operational delivery of our global data protection and privacy program. The role sits within the Legal team and reports directly to the Director of Data Protection. The successful candidate will oversee and improve the operational processes that support Sitecore’s global data protection and privacy obligations, ensuring workflows are efficient, scalable, and audit ready.
This is not a legal advisory role. It is a core delivery function that ensures Sitecore’s data protection program runs efficiently and supports legal, commercial, and strategic goals across the company.
What You’ll Do
DSR and PRR management: Support intake, tracking, fulfilment, and documentation of Data Subject Requests and Privacy Rights Requests across relevant systems and teams
Cross functional support: Work closely with Legal, Security, GRC, Product, Sales, HR, Marketing, and Procurement teams to coordinate compliance activities
DPIA coordination: Own the intake, triage, tracking, and timely completion of DPIAs and related assessments. Maintain clear records and drive follow up with business teams
Records and audit readiness: Maintain the central repository for DPIAs, ROPAs, transfer assessments, training logs, and other operational documentation. Ensure all records are accurate and audit ready
Data Protection Due diligence support: Prepare operational evidence for audits, RFP/RFI responses, customer reviews, and M&A due diligence. Maintain approved responses and supporting evidence in Loopio (or equivalent knowledge library)
AI governance support: Support operational workflows for AI governance, including intake, tracking, and maintenance of audit-ready documentation
Tooling and workflow support: Assist with data protection operations tooling (e.g., Microsoft Priva) and support repeatable workflows across training and evidence systems (e.g., Navax, Docebo, Vanta) to improve tracking, automation, and audit readiness
Training and awareness: Support the creation, scheduling, and tracking of internal data protection training, including reporting and completion tracking in corporate training platforms (e.g., Navax, Docebo)
DPO and governance support: Work with the DPO and external DPO-as-a-Service provider to coordinate intake, tracking, and documentation of regulatory-facing tasks such as DPIAs, ROPAs, and risk reviews
What You Need to Succeed
Experience: A minimum of five years’ experience in data protection, privacy operations, or compliance program management, ideally within a SaaS or cloud-based environment
Operational mindset: Organised, detail-oriented, and comfortable using privacy and compliance tools to support scalable workflows
Communication: Clear communicator who can work with both technical and nontechnical colleagues
Additional Skills That Could Set You Apart
Certifications: CIPM, CIPT, or CIPPE are strongly preferred and demonstrate applied knowledge of global data protection standards
AI governance: Experience supporting AI governance workflows, ideally in SaaS or marketing technology environments, is preferred
Audit and diligence support: Experience preparing documentation for audits, RFPs, or due diligence is beneficial
Equal Opportunities at Sitecore
Sitecore is proud to be an equal opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, colour, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.
