inhousefyi
← Back to listings

Privacy & Data Governance Manager

ByomaGlasgow, United Kingdom · Posted 1 day ago
Full-timeEst. 65,000 GBP
Apply now

Description

Hi, we’re BYOMA 👋

We’re one of the world’s fastest growing beauty brands. We have applied the research, science, and credibility of dermatologist-backed brands and supercharged it with the efficiency and results of clinically effective, ingredient-led brands.

We’re on a mission to democratize and demystify beauty by empowering consumers to make smart, informed and educated choices.

BYOMA was built on four fundamental principles; Efficacy, Accessibility, Education, Engagement, and these inform, inspire and underpin everything we do. We’re committed to delivering the most efficacious products to our consumer and our dedication to accessibility and education have led to us becoming the #1 fastest growing skincare brand in the world, and a top 10 skincare brand across all our key retail partners.

As a people powered business, none of this would have been possible without our incredible team who are committed to achieving our BYOMA vision: to build better beauty and inspire positive change.

Join us as we build an inclusive community, because let’s face it, barriers aren’t beneficial for anything other than your skin.


Job Title

Privacy & Data Governance Manager

Department

IT, Data & Business Intelligence

Reporting Manager

Head of Data & BI / Data Protection Officer

Role Banding

3

Location

Glasgow, UK Head Office

Direct Reports (Number + Title)

0

BYOMA is growing quickly across multiple markets, systems and customer touchpoints. That makes privacy and data governance more than a compliance requirement. It is part of how we protect customer trust, make better decisions and scale responsibly.

BYOMA’s data function is young and growing. Although small, we deliver enterprise grade capability and transformation and were recently nominated for Data Team of the Year at the British Data Awards. As we scale, we need a hands-on Privacy & Data Governance Manager to take operational ownership of our privacy programme and help build the governance framework around our growing data estate.

This is a delivery role, not a purely advisory one. You will own the day-to-day running of our privacy compliance, including our Record of Processing Activities, data subject and consumer rights requests, privacy notices, DPIAs, vendor due diligence and core privacy documentation. Alongside this, you will help define and maintain the governance standards that shape how BYOMA classifies, retains, accesses and controls data across the business. The role works closely with the Head of Data & BI, who is also BYOMA’s Data Protection Officer. The DPO sets direction and retains statutory responsibility. You make the programme run. Privacy and data governance are closely connected at BYOMA. A good ROPA, clear data maps and a useful data catalogue all depend on understanding what data we hold, where it moves, who has access to it, how long we keep it and why. This role brings those activities together, so our documentation, controls and ways of working stay current as the business grows.

RECORDS, DATA MAPPING AND PRIVACY DOCUMENTATION

  • Own and maintain BYOMA’s Record of Processing Activities, ensuring it reflects how the business uses personal data.
  • Maintain associated registers, including the sub-processor register and data protection documentation.
  • Map personal data flows across business areas, systems, vendors and jurisdictions.
  • Document what data we hold, where it is processed, who it is shared with, the lawful basis for processing and any international transfer considerations.
  • Keep documentation to the standard expected under UK GDPR Article 30 and equivalent consumer privacy disclosure expectations in relevant US markets.
  • Work with business teams so privacy documentation is updated as systems, vendors, processes and marketing activities change.

DATA GOVERNANCE

  • Own and maintain BYOMA’s data classification approach, ensuring the sensitivity of key data assets is documented and understood.
  • Develop and maintain retention schedules, working with system owners to ensure they are practical and applied.
  • Coordinate periodic access reviews across key platforms so permissions reflect current business roles and responsibilities.
  • Work with the DPO to define governance standards for classification, retention, access control, data ownership and documentation, and own them day to day once agreed.
  • Support the development of Microsoft Purview, or equivalent tooling, as the backbone for classification, retention, eDiscovery, DLP and data governance.
  • Coordinate a lightweight data governance forum so decisions about data are made deliberately and consistently.
  • Work closely with data engineering so governance requirements are understood and built into how the data platform operates.

USER RIGHTS AND CONSUMER REQUESTS

  • Own the end-to-end handling of data subject access requests and consumer rights requests.
  • Manage requests relating to access, deletion, correction, restriction, objection and relevant US consumer rights.
  • Ensure requests are handled within statutory timeframes and in line with BYOMA’s documented processes.
  • Verify requester identity and manage authorised agent requests appropriately.
  • Build and refine repeatable processes so request handling remains consistent as volumes grow.
  • Keep records of requests, decisions and outcomes.

POLICIES, NOTICES AND ASSESSMENTS

  • Maintain and update BYOMA’s privacy policies, notices and disclosures across the UK, EU and US, keeping them accurate as law and practice evolve.
  • Keep cookie notices, consent records and marketing consent documentation aligned with how the business operates.

Similar jobs

Rightmove CareersMilton Keynes, United Kingdom

Est. 45,000 GBP

Our vision is to give everyone the belief they can make their move. We aim to make moving simpler, by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make…

Full-time
InMobiBangalore, Karnataka, India

InMobi Advertising is a global technology leader helping marketers win the moments that matter. Our advertising platform reaches over 2 billion people across 150+ countries and turns real-time context into business outco…

Full-time
NICEAtlanta, Georgia, United States

Est. 120,000 USD

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer…

Full-time
MANSCAPEDRemote

Est. 140,000 USD

We have been alerted to the existence of a fraudster impersonating MANSCAPED as a hiring manager or HR representative. This impersonator is utilizing an email address with the domain manscapedjobs.com or manscapedcareers…

Full-timeRemote
THGManchester, England, United Kingdom

Est. 55,000 GBP

About THG We are THG, a global ecommerce group on a mission to be the global online leader in beauty and sports nutrition. Our portfolio of leading retailers and brands such as LOOKFANTASTIC, Myprotein, ESPA, Perricone M…

Full-time
Sr. RA Specialist2 months ago
Noah MedicalSan Jose, California, United States

Est. 120,000 USD

Who We Are Noah Medical is building the future of medical robotics. Our next generation robotic platform targets early diagnosis and treatment of patients across multiple indications. We are looking for exceptional engin…

Full-time
Veeam SoftwareIslamabad, Pakistan

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in…

Full-time
TruvetaHyderabad, India

Sr. Security Engineer - IAM Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Togethe…

Full-time
WPP MediaLondon, United Kingdom

Est. 80,000 GBP

About WPP Media WPP is the trusted growth partner for the world’s leading brands. With exceptional talent, trusted data and intelligence, and world-class partnerships – all united by our pioneering agentic marketing plat…

Full-time
Warburg Pincus LLCBerlin, Germany

Est. 45,000 EUR

Warburg Pincus LLC, a global growth investor, is offering an internship opportunity at their Berlin office. The internship will last approximately three months and provides a valuable learning experience within the Inves…

Full-time
BaringaLondon, United Kingdom

Est. 80,000 GBP

About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with grea…

Full-time
LevioRemote

Are you looking to thrive in a stimulating work environment? Join Levio, a leader in digital transformation, and take your career to the next level. You will work alongside high

Full-timeRemote
Rightmove CareersMilton Keynes, United Kingdom

Est. 55,000 GBP

Our vision is to give everyone the belief they can make their move. We aim to make moving simpler, by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make…

Full-time
WPPChennai, Tamil Nadu, India

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and e…

Full-time
Data Modeler4 days ago
InterSystemsBoston, Massachusetts, United States

Est. 115,000 USD

We are looking for a highly motivated, systems-oriented Lead Data Modeler to own the design, governance, and evolution of our data warehouse at InterSystems. This role sits at the center of our data lake / data warehouse…

Full-time
GHXHyderabad, Telangana, India

Software Engineer - III About the Role GHX is building a next-generation Intelligent Process Automation (IPA) platform powered by LLMs and AI-native document understanding. We extract structured data from complex healthc…

Full-time
S-RMLondon, United Kingdom

Est. 80,000 GBP

CYBER RISK ADVISORY CONSULTANT, LONDON (HYBRID) WHO WE ARE S-RM is a global intelligence and cybersecurity consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughes…

Full-time
Yondr GroupSlough, England, United Kingdom

Est. 55,000 GBP

About Yondr Yondr is a disruptor. We challenge convention and

Full-time
THGManchester, United Kingdom

Est. 45,000 GBP

About THG We are THG, a global ecommerce group on a mission to be the global online leader in beauty and sports nutrition. Our portfolio of leading retailers and brands such as LOOKFANTASTIC, Myprotein, ESPA, Perricone M…

Full-time
OneTrustBengaluru, India

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led u…

Full-time
NebiusIsrael

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…

Full-time
LevioRemote

Are you looking to thrive in a stimulating work environment? Join Levio, a leader in digital transformation, and take your career to the next level. You will work alongside high

Full-timeRemote
Rightmove CareersLondon, United Kingdom

Est. 120,000 GBP

Our vision is to give everyone the belief they can make their move. We aim to make moving simpler, by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make…

Full-time
Triple PointLondon, England, United Kingdom

Est. 65,000 GBP

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment s…

Full-time
The Trade DeskSan Francisco, California, United States

Est. 140,000 USD

The Trade Desk is a global technology company and the world’s leading independent platform for digital advertising, with nearly 4,000 employees across more than 30 offices. Our technology helps advertisers reach the righ…

Full-time
MSP Engineer16 days ago
CompuNet, Inc.Meridian, Idaho, United States

Est. 120,000 USD

Why join CompuNet? CompuNet values its people more than any other asset—and realizes the contributions made by each employee are a reflection of their education, experience, certifications, expertise and passions. We str…

Full-time
Judi HealthCharlotte, North Carolina, United States

Est. 105,000 USD

About Judi Health Judi Health is a health technology company providing benefit administration solutions to employers, unions, health plans, and government entities. Judi Health replaces fragmented, outdated systems with…

Full-time
NebiusUnited States

Est. 140,000 USD

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…

Full-time
THGManchester, United Kingdom

Est. 55,000 GBP

About THG We are THG, a global ecommerce group on a mission to be the global online leader in beauty and sports nutrition. Our portfolio of leading retailers and brands such as LOOKFANTASTIC, Myprotein, ESPA, Perricone M…

Full-time
BaringaLondon, United Kingdom

Est. 120,000 GBP

About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with grea…

Full-time