Condé Nast
Lead, Privacy Engineering & Data Governance
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Condé Nast
Condé Nast is a global media company producing the highest quality content with a footprint of more than 1 billion consumers in 32 territories through print, digital, video, and social platforms. The company’s portfolio includes many of the world’s most respected and influential media properties including Vogue, Vanity Fair, Glamour, Self, GQ, The New Yorker, Condé Nast Traveler/Traveller, Allure, AD, Bon Appétit, and Wired, among others.
Condé Nast is a global media company, home to iconic brands including Vogue, GQ, Glamour, CN Traveller, Vanity Fair, Wired, The World of Interiors, House & Garden, and Tatler, among many others. We are headquartered in New York and London and operate in 32 markets worldwide, with a footprint of more than 1 billion consumers across print, digital, video, and social platforms.
Condé Nast thrives on collaboration, and our teams come together in the office four days a week (Monday - Thursday). We value diversity of background, views, and cultures. We celebrate people for their personal qualities, skills, and contributions, recognizing the power our brands have to influence and shape culture.
Job Description
Location: London, GB
Condé Nast thrives on collaboration, and our teams come together in the office four days a week (Monday - Thursday).
We value diversity of background, views, and cultures. We celebrate people for their personal qualities, skills, and contributions, recognizing the power our brands have to influence and shape culture.
Purpose
We are looking for a hands-on technical specialist to lead how we identify and resolve privacy and data governance issues across our digital platforms. You should enjoy getting under the hood of websites and apps to understand how data is collected and transmitted. You will inspect dataLayers, browser consoles, and network calls, review HTML and JSON, and investigate cookies, tags, pixels, APIs, and SDKs. You will then work with Product and Engineering teams to understand what needs to change and help see the work through to implementation.
The role sits within Data Governance and works closely with Product, Engineering, Commercial, Audience, and Business & Legal Affairs. You do not need to come from a traditional privacy background or be a software engineer. We are looking for someone with strong technical experience who understands, or has a strong interest in, privacy, consent, and responsible data use. The role also covers broader technical data governance, including data flows, classification, access, and monitoring, particularly as data is increasingly used for self-service analytics and AI.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The role is primarily focused on hands-on technical investigation and assurance, including inspecting data collection, tracking technologies, and consent behavior. Other work involves leading governance and remediation work with Product and Engineering, maintaining data mapping, setting up and improving compliance monitoring and related governance controls, as well as supporting privacy and regulatory requirements in partnership with Business & Legal Affairs.
Responsibilities:
- Investigate websites, apps, and backend services using browser developer tools, dataLayers, network traffic, browser storage, cookies, tags, pixels, SDKs, and APIs to understand how data is collected, shared, and used.
- Review analytics, advertising, consent, and third-party implementations, test behavior before and after consent choices, and identify where live activity does not match the intended configuration.
- Turn technical findings into clear requirements and work with Product, Engineering, and vendors to resolve issues, test changes, and prevent them from recurring.
- Define practical controls for tracking, consent, data access, classification, retention, ownership, and appropriate use, including data used for self-service analytics and AI.
- Maintain accurate data maps covering systems, vendors, data elements, and processing activities, and support Records of Processing Activities, Data Protection Impact Assessments, and regulatory documentation.
- Run monitoring using tools such as Didomi, Privado, and ObservePoint, investigate findings, and maintain clear records of reviews, remediation, and technical decisions.
- Work with Business & Legal Affairs on GDPR, ePrivacy, CNIL, and other privacy requirements, providing technical evidence for regulatory reviews, audits, and vendor assessments.
- Explain technical data flows, risks, and solutions clearly to technical and non-technical stakeholders, and help embed privacy and governance into Product and Engineering workflows.
Skills And Experience
We are open to candidates from different technical backgrounds. Relevant experience may come from Privacy Engineering, Analytics Engineering, Analytics Implementation, Ad Tech, MarTech, Tag Management, Solutions Engineering, Data Engineering, or Technical Consulting.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You Should Have:
- Strong hands-on understanding of how websites and apps collect and transmit data.
- Experience using browser developer tools, including the console, network inspection, and browser storage.
- Ability to inspect and understand dataLayers, HTML, and JSON, with a good understanding of cookies, tags, pixels, trackers, APIs, and SDKs.
- Working understanding of privacy and compliance principles (e.g., GDPR, CNIL, CCPA) or experience applying technical skills in a regulated environment.
- Experience with analytics, advertising, consent, and tag management tech, e.g., GTM, Snowplow, Didomi, SourcePoint, OneTrust, or Ethyca, Ketch, or similar.
- Experience investigating technical issues and working with Product or Engineering teams to resolve them.
- Understanding of data flows and how information moves between first-party systems and third parties.
- Strong analytical and problem-solving skills, with the ability to explain technical findings clearly to technical and non-technical stakeholders.
- Enough experience to take ownership of complex work and drive it through to resolution.
Experience in the following would be useful but is not essential:
- Consent management and IAB TCF
- Data governance, classification, metadata, lineage, or access controls
- Databricks or other modern data platforms
- SQL or other methods of inspecting data
- Digital media, programmatic advertising, or audience technology
- AI or self-service analytics governance
You do not need to be a privacy lawyer or a software engineer. The strongest candidates will be technically curious, comfortable investigating how systems actually behave, and interested in using those skills to improve privacy and data governance.
What happens next?
If you are interested in this opportunity, please apply below, and we will review your application as soon as possible. You can update your resume or upload a cover letter at any time by accessing your candidate profile.
Condé Nast is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, familial status, and other legally protected characteristics.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location