Gymshark
Governance Privacy Analyst

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
OVERVIEW:
At Gymshark, data is more than information, it's trust. As our Governance & Privacy Analyst, you'll play a key role in protecting that trust by helping us ensure personal data is handled responsibly, ethically and in line with evolving global regulations.
Sitting within our Data Governance team, you'll work at the intersection of privacy, technology, compliance and business operations. You'll be a trusted advisor across the organisation, driving best practice, supporting privacy initiatives and helping to shape how data is governed across Gymshark.
From managing privacy operations and supporting compliance programmes to influencing stakeholders and preparing for emerging regulations, you'll help keep our data practices robust, scalable and future-ready.
WHAT YOU'LL BE DOING:
- Owning and managing day-to-day privacy operations, including individual rights requests (DSARs), privacy queries and data breach processes.
- Maintaining and improving key privacy and governance documentation such as privacy notices, processing agreements, policies and procedures.
- Supporting Data Protection Impact Assessments (DPIAs) and wider privacy risk assessments across the business.
- Partnering with teams across Gymshark to embed privacy-by-design principles into projects, processes and new initiatives.
- Acting as a trusted subject matter expert, providing guidance on data handling, governance and regulatory requirements.
- Supporting compliance with GDPR, PECR and other relevant privacy regulations across multiple territories.
- Helping to manage Records of Processing Activities (RoPA), retention schedules and governance controls.
- Delivering engaging education and awareness initiatives to strengthen data privacy knowledge across the business.
- Supporting governance reviews, privacy audits and continuous improvement activities.
- Assessing privacy risks associated with new technologies, vendors and business processes.
- Collaborating with Legal, Security and Technology teams to ensure data is managed safely and responsibly.
- Supporting Gymshark's evolving approach to AI governance, data ethics and emerging regulatory requirements.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
WHAT YOU'LL NEED:
Essential Criteria:
- Proven experience working within Data Privacy, Data Protection, Governance or Compliance.
- Hands-on experience managing DSARs, DPIAs, privacy incidents and data protection processes.
- Strong working knowledge of privacy legislation such as GDPR, PECR and other global data protection regulations.
- Experience developing, maintaining and improving governance policies, frameworks and procedures.
- The ability to interpret regulation and translate it into practical business guidance.
- Excellent stakeholder management skills with the confidence to influence and collaborate across all levels of the organisation.
- Strong analytical and problem-solving skills, with the ability to investigate issues and drive solutions through to completion.
- A proactive mindset with a passion for continuous improvement and operational excellence.
- The ability to balance commercial objectives with privacy, compliance and risk management requirements.
- A genuine interest in emerging technologies, data ethics and areas such as AI governance and digital privacy.
- Experience working alongside Legal, Technology, Security or Risk teams would be highly advantageous.
CLOSING DATE:
Monday 24th August 2026
LOCATION:
Please note this is a hybrid role and requires the successful candidate to attend at least 3 days a week in GSIQ, Solihull, UK.
BELONGING AT GYMSHARK.
Our mission is to be a place where everyone belongs. We’re an equal opportunities employer, and for us that means we always strive to be as inclusive as possible in all aspects of employment, right from your application. We’re committed to finding reasonable adjustments* for candidates with specific needs or have a disability during our recruitment process, and all applicants will be considered fairly and equally. We do not tolerate discrimination of any kind. *If you’d like to request a reasonable adjustment please email talent@gymshark.com.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
ABOUT US.
We’re here to unite the conditioning community. We believe that putting the sweat in today, prepares us for tomorrow. So, we give people the tools they need to reach further, go faster, be stronger. We celebrate those who show up – for themselves – to be their physical or mental best, whatever that means for them. It’s what we want for our community, and our team. A team that’s growing rapidly around the world. A collective of talented individuals working together to invent Gymshark’s future. Our plans are ambitious, and we’re looking for people who want to join us for the ride – our growth will be your growth.
THE PERKS.
Standard benefits include:
- Performance-based Bonus opportunity
- Funded Healthcare benefit
- 25 days holiday, additional day for your birthday & Bank Holidays
- Contributory Employer pension scheme
- Flexible benefits programme – including salary sacrifice EV scheme, dental insurance, cycle to work, tech scheme, holiday trading
- Gymshark Employee Discount & long service awards
- Access to High Street cashback and discounts
- Financial, Physical and Mental Wellbeing Support
- Enhanced Family Leave package
- Life Assurance
Office location specific benefits include (IQ):
- Gym Membership to The Lifting Club (LC)
- Onsite lunch provision & coffee bars
- EV charge points available
Office location specific benefits include (LDN):
- Funded multi-site fitness membership
Note: The bonus program and benefits have certain eligibility requirements. Gymshark reserves the right to amend these programs in whole or in part at any time without advance notice.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills