Head of Privacy

UNiDAYS is a global identity and verification platform connecting brands with verified students and
Gen Z audiences across more than 115 markets. We provide verification services to some of the world's
largest platforms, alongside marketplace and media products for leading global brands.
We are looking for an experienced, commercially minded privacy leader to own our global privacy
programme, with a particular focus on embedding privacy into our products and technology.
This is a senior, hands-on role and our sole in-house privacy position. You will work closely with
Product and Engineering, advise the wider business and collaborate with an independent DPO, should
that function be outsourced.
You will independently assess risks, set priorities, provide practical guidance and drive matters through
to resolution. We need someone who has done this before: a self-starter with sound commercial
judgement, strong execution skills and the confidence to operate autonomously while knowing when
to escalate.
Product privacy and privacy by design
● Partner with Product and Engineering to embed privacy into product design, development and
launches.
● Assess new products, features and technologies, providing practical, commercially viable
solutions.
● Advise on data flows, lawful bases, consent, retention and other privacy requirements.
● Lead privacy considerations for identity verification, younger users (13+) and age assurance,
including the Age Appropriate Design Code and relevant emerging regulations.
Privacy risk, assurance and governance
● Independently conduct risk-based privacy audits and assessments across products, systems,
vendors and operations.
● Own core privacy governance, including DPIAs, RoPAs, policies, notices, data mapping and
international transfers.
● Maintain a privacy risk register, identify compliance gaps and drive remediation through to
completion.
● Oversee data subject rights, complaints and privacy incidents, working with Information
Security and any appointed external DPO.
● Lead operational AI governance, including AI risk assessments, internal AI use standards and
EU AI Act readiness.
● Maintain and improve the global privacy programme, ensuring compliance with UK and EU
GDPR, PECR and other applicable international privacy laws.
Commercial advice and stakeholder engagement
● Serve as the primary privacy adviser across the business, providing timely, clear and
commercially grounded guidance.
● Support Commercial and Partnerships on data protection terms, customer requirements and
privacy assurance requests.
● Deliver engaging privacy training and communicate confidently across the organisation,
including at company-wide forums.
● Provide concise, actionable reporting to the General Counsel, executive leadership and, where
required, the Board.
Operational excellence
● Develop scalable privacy processes, playbooks and technology-enabled workflows, using tools
such as OneTrust and AI to improve efficiency.
● Independently manage competing priorities, establish clear accountability and ensure issues
are followed through to resolution.
● Typically 8+ years of privacy and data protection experience, including senior responsibility in
a technology-led, product-driven or data-intensive business.
● A proven track record of independently owning a privacy programme, conducting audits,
identifying risks and delivering remediation.
● Demonstrated experience embedding privacy by design into live products and working closely
with Product and Engineering.
● Deep expertise in UK and EU GDPR, with working knowledge of international privacy regimes.
● Strong technical understanding of data flows, systems architecture and APIs.
● Excellent commercial judgement, communication and presentation skills, with the confidence
to influence senior stakeholders.
● A self-directed, hands-on approach, with proven ability to manage competing priorities and
deliver results without a supporting privacy team.
● Experience with OneTrust or a similar privacy management platform.
Highly desirable: Experience with identity verification, digital identity, children's or young people's
data, advertising and audience data, or implementing AI-enabled processes.
A legal qualification or recognised privacy certification (such as CIPP/E or CIPM) is advantageous but
not essential.
This is your opportunity to Join the world’s largest student verification network and help shape the future of how brands connect with the next generation. We engage a community of 23M+ verified students and graduates across 115 markets, making us a truly global platform. Our brand is a powerhouse in the UK, and we’re rapidly accelerating our presence worldwide—especially in the US, Germany, India, France, Canada, and Australia.
We partner with 850+ of the world’s biggest brands, bringing their products and services to the hearts and minds of tomorrow’s professionals—driving engagement, building affinity, and delivering real results.
We offer a fast-paced, fun, and social working environment where you can truly make an impact. We believe work should enhance and complement your life, which is why we provide a hybrid working model. You will work together in person a minimum of 2 days per week and work from home for up to 3 days a week. 
We work hard at UNiDAYS, and we believe in fair compensation for that hard work. That’s why we’re proud to offer all employees full access to our comprehensive benefits package.
Our perks include:
25 days holiday per year increasing with length of service, plus bank holidays
Competitive salaries
4pm finishes every Friday
Company pension scheme
Private health insurance (BUPA)
Dental Insurance (BUPA)
Income protection policy
Life assurance policy
Employee Assistance Program
Enhanced parental leave pay
Regular team building activities
£150 pounds towards your home office set up
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status or disability status.