Back to jobs
P
PureGym People

Group Data Compliance Manager

London Hybrid 5-10 yrs exp
Data protectionPrivacy complianceGDPRRegulatory oversightData protection impact assessments

Requirements

The role requires significant experience leading data protection and privacy programs in a multi-jurisdictional environment. Candidates must possess expert knowledge of UK, EU, and Swiss GDPR, as well as applicable US privacy legislation.

Job Description

The PureGym Way

The PureGym Group is a global gym business with a community of more than 700 gyms and over 2 million members. At PureGym, everything we do comes back to one simple idea: helping you feel good.

We're proud of our people and have a strong focus on internal progression. Championing diversity, we are committed to providing an excellent employee experience and workplace culture. As such, we are a Disability Confident Committed employer, and offer interviews to candidates who meet the essential criteria for a role, and opt-in to the scheme on their application form.

Our gyms are friendly, supportive, and judgement-free spaces where everybody can come in, work out and leave Feeling PureGym Good. We are proud to be certified by Top Employers Institute. See our careers page for full benefits.

We offer

  • Free nationwide gym membership for you + 1
  • Hybrid working
  • A truly flexible working culture
  • Personal private healthcare, including digital GP
  • Life insurance x4
  • Company pension contribution
  • 25 days annual leave, plus 1 personal day
  • Option to purchase additional holiday (up to 5 days)
  • Great learning & development resources
  • Enhanced maternity pay, paternity and adoption leave

 

The Role

Location: Remote/Hybrid - based either in London or Leeds

Type: Full Time
Contract type: Permanent

Application: Closing date

 

We are looking for a Group Data Compliance Manager who’s position will incorporate the role of Designated Data Protection Officer to join the wider Health & Safety Team.

This is a hybrid role, working from either our London or Leeds office two days a week.

The Role

The provides expertise to ensure that the business is protected and remains compliant in all practices whilst remaining agile and being able to operate and make risk based commercial decisions.

The Group Data Compliance Manager is responsible for leading and shaping PureGym's global privacy and data protection strategy across all operating markets. Reporting to the Group Head of Health & Safety, the role provides expert and independent oversight of data protection compliance, ensuring the organisation meets its legal and regulatory obligations while supporting business growth and innovation. The postholder will act as the primary privacy advisor to the business, lead engagement with regulators, oversee the Group's privacy governance framework, and drive a culture of accountability and responsible data use across the organisation. Supported by the Data Protection Support Officer, the role will provide strategic leadership for data compliance activities and ensure privacy risks are effectively identified, managed and reported throughout the Group

 

Key responsibilities:

  • Leading the Data Protection Officer 
  • Regulatory oversight and engagement
  • Privacy compliance programme management
  • Data Protection Impact Assessments
  • Data Subjects Rights and Complaints handling
  • Lead governance of cross-border personal data transfers
  • Third-party risk management and review of PureGym providers and data processors
  • Incident & Breach Management
  • Maintenance of Group Policies and Standards
  • Training, awareness and Culture
  • Maintenance of ROPA, retention schedules and data mapping activities

 

The Person

Significant experience leading data protection and privacy programmes in a multi-jurisdictional environment.

Demonstrable experience acting as a Data Protection Officer or senior privacy professional.

Expert knowledge of:

UK GDPR

EU GDPR

Swiss FADP

Applicable US privacy legislation

International transfer requirements

 

The role requires:

Experience managing regulatory interactions and investigations.

Strong understanding of privacy by design principles.

Experience conducting DPIAs and privacy risk assessments.

Experience managing complex data subject rights requests and complaints.

Experience reviewing supplier privacy compliance arrangements.

Strong knowledge of information governance and records management practices.

Ability to balance regulatory compliance with commercial objectives.

Strong stakeholder management and influencing skills.

Confidence in advising senior leadership and executive teams.

Excellent communication and presentation skills.

Strong attention to detail and organisational capability.

Ability to work independently while building collaborative partnerships.

High levels of integrity, accountability and professional judgement.

Lives and breathes our values in everything they do

Hybrid working with a minimum of 2 days a week in the office and willingness to travel Internationally as required

 

PureGym is proud to be an equal opportunities employer. Our company mantra is ‘Everybody Welcome’ and we are dedicated to promoting a diverse and inclusive place to work. From a hiring standpoint, we welcome applicants from all backgrounds and are committed to ensuring that our PureGym colleagues reflect the diversity of the nation as well as our millions of gym members we serve. 


Please note: Qualifications and Skills represent the essential criteria for the role, which need to be met to be offered an interview under the Disability Confident Scheme. Volume of eligible applications may impact everyone being able to be offered an interview.

Applications will be reviewed on a rolling basis, and the advert may be withdrawn at any time. Early application is encouraged.

 

Skills

Data protectionPrivacy complianceGDPRRegulatory oversightData protection impact assessmentsGovernanceRisk managementInformation governanceRecords managementStakeholder managementCommunicationPresentation skillsData mappingIncident managementPolicy developmentCross-border data transfers