Data Protection Operations Manager

About Us:

At Sitecore, our mission is to simplify how brands reach, engage, and serve people by delivering intelligent, personalised digital experiences that connect the world. We empower the world’s most iconic brands to build lifelong relationships with their customers—seamlessly, smartly, and at scale.

As the leading provider of agentic digital experience software, Sitecore brings together content, commerce, and data into one composable platform that enables brands to deliver millions of meaningful, adaptive experiences every day. Trusted by global leaders such as American Express, Porsche, Starbucks, and L’Oréal, Sitecore helps brands transform engagement through experiences that are not only personalised but predictive and dynamic.

Our foundation is our people—a diverse, passionate, and collaborative global team spanning over 25 countries. We believe that every experience matters, and that belief starts with how we work together. Our values guide how we lead, innovate, and connect. They are the behaviours that bring our mission and vision to life, every day, in every interaction.

As we continue to evolve, we are actively cultivating AI skills across our teams to unlock new levels of creativity, efficiency, and insight. From engineering to customer experience, AI capabilities are becoming integral to how we design, build, and deliver the next generation of digital experiences.

Learn more at Sitecore.com.

About the Role:

Sitecore is seeking a Data Protection Operations Manager to support the operational delivery of our global data protection and privacy program. The role sits within the Legal team and reports directly to the Director of Data Protection. The successful candidate will oversee and improve the operational processes that support Sitecore’s global data protection and privacy obligations, ensuring workflows are efficient, scalable, and audit ready.

This is not a legal advisory role. It is a core delivery function that ensures Sitecore’s data protection program runs efficiently and supports legal, commercial, and strategic goals across the company.

What You’ll Do:

• DSR and PRR management: Support intake, tracking, fulfilment, and documentation of Data Subject Requests and Privacy Rights Requests across relevant systems and teams

• Cross functional support: Work closely with Legal, Security, GRC, Product, Sales, HR, Marketing, and Procurement teams to coordinate compliance activities

• DPIA coordination: Own the intake, triage, tracking, and timely completion of DPIAs and related assessments. Maintain clear records and drive follow up with business teams

• Records and audit readiness: Maintain the central repository for DPIAs, ROPAs, transfer assessments, training logs, and other operational documentation. Ensure all records are accurate and audit ready

• Data Protection Due diligence support: Prepare operational evidence for audits, RFP/RFI responses, customer reviews, and M&A due diligence. Maintain approved responses and supporting evidence in Loopio (or equivalent knowledge library)

• AI governance support: Support operational workflows for AI governance, including intake, tracking, and maintenance of audit-ready documentation

• Tooling and workflow support: Assist with data protection operations tooling (e.g., Microsoft Priva) and support repeatable workflows across training and evidence systems (e.g., Navax, Docebo, Vanta) to improve tracking, automation, and audit readiness

• Training and awareness: Support the creation, scheduling, and tracking of internal data protection training, including reporting and completion tracking in corporate training platforms (e.g., Navax, Docebo)

• DPO and governance support: Work with the DPO and external DPO-as-a-Service provider to coordinate intake, tracking, and documentation of regulatory-facing tasks such as DPIAs, ROPAs, and risk reviews

What You Need to Succeed:

• Experience: A minimum of five years’ experience in data protection, privacy operations, or compliance program management, ideally within a SaaS or cloud-based environment

• Operational mindset: Organised, detail-oriented, and comfortable using privacy and compliance tools to support scalable workflows

• Communication: Clear communicator who can work with both technical and nontechnical colleagues

Additional Skills That Could Set You Apart:

• Certifications: CIPM, CIPT, or CIPPE are strongly preferred and demonstrate applied knowledge of global data protection standards

• AI governance: Experience supporting AI governance workflows, ideally in SaaS or marketing technology environments, is preferred

• Audit and diligence support: Experience preparing documentation for audits, RFPs, or due diligence is beneficial

Equal Opportunities at Sitecore:

Sitecore is proud to be an equal opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, colour, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.