About Us

At Sitecore, our mission is to simplify how brands reach, engage, and serve people by delivering intelligent, personalised digital experiences that connect the world. We empower the world’s most iconic brands to build lifelong relationships with their customers—seamlessly, smartly, and at scale.

As the leading provider of agentic digital experience software, Sitecore brings together content, commerce, and data into one composable platform that enables brands to deliver millions of meaningful, adaptive experiences every day. Trusted by global leaders such as American Express, Porsche, Starbucks, and L’Oréal, Sitecore helps brands transform engagement through experiences that are not only personalised but predictive and dynamic.

Our foundation is our people—a diverse, passionate, and collaborative global team spanning over 25 countries. We believe that every experience matters, and that belief starts with how we work together. Our values guide how we lead, innovate, and connect. They are the behaviours that bring our mission and vision to life, every day, in every interaction.

As we continue to evolve, we are actively cultivating AI skills across our teams to unlock new levels of creativity, efficiency, and insight. From engineering to customer experience, AI capabilities are becoming integral to how we design, build, and deliver the next generation of digital experiences.

Learn more at Sitecore.com.

About the Role

Sitecore is seeking a Data Protection Operations Manager to support the operational delivery of our global data protection and privacy program. The role sits within the Legal team and reports directly to the Director of Data Protection. The successful candidate will oversee and improve the operational processes that support Sitecore’s global data protection and privacy obligations, ensuring workflows are efficient, scalable, and audit ready.

This is not a legal advisory role. It is a core delivery function that ensures Sitecore’s data protection program runs efficiently and supports legal, commercial, and strategic goals across the company.

What You’ll Do

DSR and PRR management: Support intake, tracking, fulfilment, and documentation of Data Subject Requests and Privacy Rights Requests across relevant systems and teams

Cross functional support: Work closely with Legal, Security, GRC, Product, Sales, HR, Marketing, and Procurement teams to coordinate compliance activities

DPIA coordination: Own the intake, triage, tracking, and timely completion of DPIAs and related assessments. Maintain clear records and drive follow up with business teams

Records and audit readiness: Maintain the central repository for DPIAs, ROPAs, transfer assessments, training logs, and other operational documentation. Ensure all records are accurate and audit ready

Data Protection Due diligence support: Prepare operational evidence for audits, RFP/RFI responses, customer reviews, and M&A due diligence. Maintain approved responses and supporting evidence in Loopio (or equivalent knowledge library)

AI governance support: Support operational workflows for AI governance, including intake, tracking, and maintenance of audit-ready documentation

Tooling and workflow support: Assist with data protection operations tooling (e.g., Microsoft Priva) and support repeatable workflows across training and evidence systems (e.g., Navax, Docebo, Vanta) to improve tracking, automation, and audit readiness

Training and awareness: Support the creation, scheduling, and tracking of internal data protection training, including reporting and completion tracking in corporate training platforms (e.g., Navax, Docebo)

DPO and governance support: Work with the DPO and external DPO-as-a-Service provider to coordinate intake, tracking, and documentation of regulatory-facing tasks such as DPIAs, ROPAs, and risk reviews

What You Need to Succeed

Experience: A minimum of five years’ experience in data protection, privacy operations, or compliance program management, ideally within a SaaS or cloud-based environment