Senior Privacy Manager – Consent & Transparency (12 month contract)
Samsung · Samsung ESBO Floor 3 Eighty Strand London WC2R 0RE, United Kingdom · hybrid
Position Summary
Why join our team?
We are expanding our team of privacy experts to support the Samsung Electronics’ European Service Business (“ESBO”).
ESBO processes large quantities of Samsung’s first-party data and third-party data to provide consumers with Samsung services on Samsung mobiles and Samsung Smart TVs in Europe, Middle East and Africa (EMEA). The data is especially relevant to our advertising business, Samsung Ads, where Samsung data is its unique selling proposition.
To manage these risks, Samsung has a global team of privacy experts. They are integral to the continued success of Samsung’s new and existing products.
Given the importance of consumer trust, Samsung is a privacy-forward company. We are focused on making sure that our consumers’ personal data is treated fairly and within the scope of relevant data protection legislation.
We are looking for a Senior Privacy Manager – Consent & Transparency to join our rapidly growing advertising and services business as an integral part of our data privacy and compliance function for EMEA Service Business.
You will lead the privacy side of a new ESBO consent and transparency framework and support the team on general privacy matters across ESBO.
The successful applicant will report into the Director of Privacy – EMEA and will be based in central London. Some travel may be required. You will work in close partnership with the Product team, who owns the product roadmap and delivery of the framework.
Role and Responsibilities
Your key responsibilities
As a Privacy Manager, you will be the business’s expert on consent, transparency and device-level tracking. This role sits outside the legal team but works closely with product teams, engineering, legal and leadership to embed privacy-by-design and default principles into our operations.
You will be responsible for guiding the business on consent and transparency risk and ethical data use, ensuring our products not only comply with GDPR, ePrivacy/PECR and TCF requirements, but also give consumers a real, informed choice that they understand and can change.
The key responsibilities of this role will be to:
• Lead the privacy and compliance workstream for a device-level TCF CMP – consent design, purposes and vendor scope, legal QA of consent journeys, and sign-off gates from design through to rollout.
• Own ongoing TCF and regulatory compliance for the CMP once live, including CMP registration and validation, Global Vendor List management, vendor onboarding and removal, and monitoring of TCF policy and version changes.
• Own our existing consent mechanisms and transparency products, including privacy notices, first-run and in-device disclosures and user preference controls, keeping them accurate as our products and data flows change.
• Conduct and document data protection impact assessments and legitimate interest assessments for consent-dependent initiatives, including audience measurement (JIC) participation and programmatic advertising products.
• Maintain a market-by-market view of consent and device-storage requirements across EMEA, tracking regulator guidance and national ePrivacy implementations, and translating changes into product requirements.
• Work in close partnership with Product & GTM, converting legal and regulatory requirements into clear product specifications, acceptance criteria and release sign-off.
• Assist our partnerships and legal colleagues to on-board new clients, service providers, AdTech vendors and data partners in a privacy compliant and efficient manner.
• Assist in the creation, implementation and management of business mandates and privacy processes to ensure policy and regulatory compliance, and maintain privacy-related documentation including records of processing, compliance logs and approvals.
• Design, develop and assist with the delivery of business-specific training on consent, transparency and TCF for internal stakeholders.
• Support the wider privacy programme on ad hoc matters as workload requires, including business requests, new product reviews and data subject rights requests.
• Streamline privacy workflows, leveraging automation and AI tools where applicable.
What we need for this role
To be successful, you will possess the following skills and attributes:
· Deep understanding of GDPR, ePrivacy/PECR and other EMEA privacy laws, with particular depth on consent, transparency, and the rules on storing or accessing information on a user’s device.
· Working knowledge of the IAB Europe Transparency and Consent Framework (TCF v2.2) – purposes and legal bases, the TC String, the Global Vendor List and CMP validation.
· Hands-on experience of consent management in practice – implementing, configuring, operating or directly advising on a consent management platform – and a working understanding of how consent signals are captured, stored and passed downstream.
· Proven track record of successfully managing data protection compliance and implementing privacy-by-design principles across multiple jurisdictions, including data protection impact assessments and legitimate interest assessments.
· Ability to work credibly with product and engineering teams: turning legal requirements into specifications that can be built, and reviewing what is built against what was agreed.
· Ability to quickly and accurately assess practical and business risks in a fast-paced environment and the ability to communicate effectively with all levels of the organisation.
· Demonstrated success in managing multiple high-priority projects simultaneously, coordinating seamlessly across global teams and functions.
· Exceptional interpersonal skills and an absolute commitment to professionalism and collegiality.
· Maintain composure under pressure with a positive, solutions-oriented attitude and collaborative spirit.
Additional desirable skills and attributes which are not necessary, but will be helpful to the role:
· Industry expertise in media, broadcasting, advertising or marketing, combined with privacy knowledge; connected TV or streaming experience is particularly welcome.
· Experience of privacy issues in programmatic advertising, including OpenRTB, private marketplace deals and device advertising identifiers.
· Familiarity with audience measurement or joint industry committee schemes, and the privacy questions that come with impression-level data sharing.
· Certified Information Privacy Professional (CIPP/E) or other recognised privacy/legal certification.
· Strong interest in technology, with particular enthusiasm for AdTech or complex data ecosystems.
What does success look like?
You will be able to independently navigate the complex world of consent and device-level privacy and give the business practical, real-life answers that let it move – not blanket caution.
On a day-to-day basis you will be the person the business comes to on consent. Over your first year, success will mean:
· A device-level TCF CMP live in our priority EMEA markets, with the consent design, DPIA and decision trail documented well enough to stand up to regulator or partner scrutiny.
· Consent signals that our demand partners, vendors and measurement partners accept and can act on, unblocking the advertising products that depend on them.
· Ongoing TCF and consent compliance running as business as usual – vendor and policy changes handled in-house, without escalation and without surprises.
· Partnering with global product to integrate ‘privacy-first’ principles into product development, with privacy engaged at design rather than after design freeze.
· Working c