Data Protection Manager

Company Description:

We Dream. We Do. We Deliver.

At Merkle, a dentsu company, we power theexperienceeconomy. Whetherwe’rebuilding the next greatapp, running CRM at scale for global brands, delivering technology architectures that support millions ofusers, or providing world-class data, identity, and insights solutions,it’sall in the name of craftingexperiences that set brands apart from the competition. Backed bydentsu'slegacy of innovation andcreativity originating in Japan,we’vespent over 35 years helping brands build loyalty, drive growth, andconnect meaningfully with their audiences.

We’vebeen named a global “Leader” by top industry analyst firms in categories as wide-ranging as digitaltransformation and commerce, experience design,engineeringand technology integration, digitalmarketing, data science,CRM andloyalty, and customer data management.

Why choose Merkle?

Innovation at Our Core:As part ofdentsu’sglobal network, Merkle pushes the boundaries of customerexperience, integrating creativity, technology, and data to drive real-world impact. For over 35 years,we’vebeen innovating to meet the changing needs of our clients.

Global Reach with Local Expertise:With over16,000 employeesacross 30+ countries, and part of a70,000employees’network at dentsu, Merkle blends global insights with a deep understanding of localmarkets to deliver personalized, effective solutions.

Collaborative Culture:At Merkle, your ideas and contributions truly matter.You’lljoin a team that fostersinnovation, collaboration, and creative problem-solving. Together, we work on impactful internationalprojects, making meaningful connections every step of the way.

Job Description:

Key responsibilities:

• Oversees and provides advice on data protection compliance issues.
• Manages responses to individuals’ rights requests, including responses to more complex requests and complaints.
• Monitors and analyses the data protection legal and policy environment and makes necessary changes to polices or procedures.
• Manages compliance with data protection and privacy compliance activities within the group, region or market.
• Devises and delivers training on data protection and privacy issues.
• Assists Data Protection Officers in regulatory liaison activity.
• Provides advice on data protection risks arising from the collection and use of personal data.
• Oversees and undertakes research on data protection law and policy issues.
• Manages people, for example Data Protection Compliance Executives.
• Manages internal communications on data protection and privacy activities.
• Monitors and challenges performance and progress made against data protection compliance frameworks.
• Maintains ongoing and current knowledge of evolving data protection and privacy laws.
• Undertakes investigations in relation to potential or alleged non-compliances with data protection and privacy requirements.

Requirements:

• Law degree, with a Master’s or postgraduate qualification in Data Protection, IT Law or related fields considered an advantage.

• Minimum 5 years of experience in data protection, privacy or compliance roles within corporate environments, legal consultancy or the media/communications sector.

• Strong knowledge of GDPR and Portuguese legislation, including Law 58/2019, Law 41/2004 and the broader EU privacy framework.

• Experience handling core privacy operations such as data subject rights requests, DPIAs, data breach management and interactions with supervisory authorities.

• Familiarity with CNPD and EDPB guidance and the ability to apply regulatory decisions to practical scenarios.

• Experience drafting and implementing policies, procedures and training programmes related to data protection.

• Fluency in Portuguese and fluent English, with additional languages considered an asset.

• Registration with the Portuguese Bar Association valued but not mandatory.

• Strong analytical and problem‑solving skills with the ability to interpret complex legal issues.

• Excellent communication skills, capable of translating legal concepts into clear, accessible language for non‑legal audiences.

• High attention to detail and the ability to manage multiple priorities simultaneously.

• Proactive and autonomous working style combined with a collaborative approach across business areas.

• Leadership and team‑management capability, with the ability to guide and support others.

Preferred Requirements:

• Professional certifications such as CIPP/E, CIPM, CIPT or equivalent.

• Experience in multinational environments or corporate groups operating across multiple jurisdictions.

• Team leadership experience with demonstrated ability to manage and develop others.

• Familiarity with compliance tools such as OneTrust, TrustArc or similar platforms.

• Knowledge of the advertising, media or digital marketing sector