Lead, Privacy Engineering & Data Governance

We are looking for a hands-on technical specialist to lead how we identify and resolve privacy and data governance issues across our digital platforms. You should enjoy getting under the hood of websites and apps to understand how data is collected and transmitted. You will inspect dataLayers browser consoles and network calls review HTML and JSON and investigate cookies tags pixels APIs and SDKs. You will then work with Product and Engineering teams to understand what needs to change and help see the work through to implementation.

The role sits within Data Governance and works closely with Product Engineering Commercial Audience and Business & Legal Affairs. You do not need to come from a traditional privacy background or be a software engineer. We are looking for someone with strong technical experience who understands or has a strong interest in privacy consent and responsible data use. The role also covers broader technical data governance including data flows classification access and monitoring particularly as data is increasingly used for self-service analytics and AI.

The role is primarily focused on hands-on technical investigation and assurance including inspecting data collection tracking technologies and consent behaviour. Other work involves leading governance and remediation work with Product and Engineering maintaining data mapping setting up and improving compliance monitoring and related governance controls as well as supporting privacy and regulatory requirements in partnership with Business & Legal Affairs.

Responsibilities:

• Investigate websites apps and backend services using browser developer tools dataLayers network traffic browser storage cookies tags pixels SDKs and APIs to understand how data is collected shared and used.

• Review analytics advertising consent and third party implementations test behaviour before and after consent choices and identify where live activity does not match the intended configuration.

• Turn technical findings into clear requirements and work with Product Engineering and vendors to resolve issues test changes and prevent them from recurring.

• Define practical controls for tracking consent data access classification retention ownership and appropriate use including data used for self service analytics and AI.

• Maintain accurate data maps covering systems vendors data elements and processing activities and support Records of Processing Activities Data Protection Impact Assessments and regulatory documentation.

• Run monitoring using tools such as Didomi Privado and ObservePoint investigate findings and maintain clear records of reviews remediation and technical decisions.

• Work with Business & Legal Affairs on GDPR ePrivacy CNIL and other privacy requirements providing technical evidence for regulatory reviews audits and vendor assessments.

• Explain technical data flows risks and solutions clearly to technical and non technical stakeholders and help embed privacy and governance into Product and Engineering workflows.

Skills and Experience

We are open to candidates from different technical backgrounds. Relevant experience may come from Privacy Engineering Analytics Engineering Analytics Implementation Ad Tech MarTech Tag Management Solutions Engineering Data Engineering or Technical Consulting.

You should have:

• Strong hands on understanding of how websites and apps collect and transmit data

• Experience using browser developer tools including the console network inspection and browser storage

• Ability to inspect and understand dataLayers HTML and JSON with a good understanding of cookies tags pixels trackers APIs and SDKs

• Working understanding of privacy and compliance principles (e.g. GDPR CNIL CCPA) or experience applying technical skills in a regulated environment

• Experience with analytics advertising consent and tag management tech e.g. GTM Snowplow Didomi SourcePoint OneTrust or Ethyca Ketch or similar

• Experience investigating technical issues and working with Product or Engineering teams to resolve them

• Understanding of data flows and how information moves between first party systems and third parties

• Strong analytical and problem solving skills with the ability to explain technical findings clearly to technical and non technical stakeholders

• Enough experience to take ownership of complex work and drive it through to resolution

Experience in the following would be useful but is not essential:

• Consent management and IAB TCF

• Data governance classification metadata lineage or access controls

• Databricks or other modern data platforms

• SQL or other methods of inspecting data

• Digital media programmatic advertising or audience technology

• AI or self service analytics governance

You do not need to be a privacy lawyer or a software engineer. The strongest candidates will be technically curious comfortable investigating how systems actually behave and interested in using those skills to improve privacy and data governance.

What happens next
If you are interested in this opportunity please apply below and we will review your application as soon as possible. You can update your resume or upload a cover letter at any time by accessing your candidate profile.

Condé Nast is an equal opportunity employer. We evaluate qualified applicants without regard to race color religion sex sexual orientation gender identity national origin disability veteran status age familial status and other legally protected characteristics.