S

Sopra Steria

IT consulting, digital services, and transformation

Technical Lead - GDPR

Program ManagementConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • Strong hands-on experience with UK GDPR and data privacy programs.
  • Good knowledge of the Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
  • Experience managing technical programs involving privacy, compliance, or data protection.
  • Strong stakeholder, risk, dependency, and governance management skills.
  • Good understanding of cloud platforms, identity and access management, encryption, data loss prevention, data classification, and data lifecycle management.
  • Experience working with Agile/Scrum and software development lifecycle/DevSecOps environments.
  • Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.
  • A Bachelor's degree in computer science, Information Technology, Information Systems, Engineering, or a related field is required.
  • 5–8+ years of experience leading technical programs or IT program management.
  • 3+ years of experience delivering privacy or compliance programs.
  • Experience working with engineering and security teams.
  • Experience managing enterprise-scale technical programs.

Responsibilities

  • Lead end-to-end technical programs focused on GDPR and data privacy.
  • Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
  • Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
  • Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
  • Support privacy incident response, audits, compliance assessments, and remediation.
  • Manage third-party/vendor privacy risks and data protection requirements.
  • Track program KPIs and provide regular updates to senior leadership.
  • Drive Privacy by Design and Privacy by Default across technology initiatives.

Desired Qualifications

  • Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
  • Experience with regulatory audits and third-party privacy assessments.

About the Company

Sopra Steria

IT consulting, digital services, and transformation

Sopra Steria provides consulting, digital services and solutions to help large organizations transform their business through technology. Its offerings cover strategy, systems integration, cloud, cyber security, software development, and managed services, designed to be delivered end to end—from assessing needs and designing a plan to implementing and operating IT systems. The company combines deep knowledge of many industries with a collaborative approach to tailor projects to each client and to deliver measurable, sustainable improvements in performance. Differentiators include its European scale (about 51,000 employees across roughly 30 countries), broad scope—from strategy to operation—and emphasis on practical outcomes that help clients stay competitive. The group’s goal is to put digital to work for its clients in a way that creates a positive, more productive future for all stakeholders.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1968

Recently Posted Jobs

Explore more opportunities at Sopra Steria

See more jobs