Data Protection Manager

Company Description:

We Dream. We Do. We Deliver. 

At Merkle, a dentsu company, we power the experience economy. Whether we’re building the next great app, running CRM at scale for global brands, delivering technology architectures that support millions of users, or providing world-class data, identity, and insights solutions, it’s all in the name of crafting experiences that set brands apart from the competition. Backed by dentsu's legacy of innovation and creativity originating in Japan, we’ve spent over 35 years helping brands build loyalty, drive growth, and connect meaningfully with their audiences.  

We’ve been named a global “Leader” by top industry analyst firms in categories as wide-ranging as digital transformation and commerce, experience design, engineering and technology integration, digital marketing, data science, CRM and loyalty, and customer data management. 

Why choose Merkle? 

Innovation at Our Core: As part of dentsu’s global network, Merkle pushes the boundaries of customer experience, integrating creativity, technology, and data to drive real-world impact. For over 35 years, we’ve been innovating to meet the changing needs of our clients. 

Global Reach with Local Expertise: With over 16,000 employees across 30+ countries, and part of a 70,000 employees’ network at dentsu, Merkle blends global insights with a deep understanding of local markets to deliver personalized, effective solutions. 

Collaborative Culture: At Merkle, your ideas and contributions truly matter. You’ll join a team that fosters innovation, collaboration, and creative problem-solving. Together, we work on impactful international projects, making meaningful connections every step of the way. 

Job Description:

Key responsibilities:

• Oversees and provides advice on data protection compliance issues.
• Manages responses to individuals’ rights requests, including responses to more complex requests and complaints.
• Monitors and analyses the data protection legal and policy environment and makes necessary changes to polices or procedures.
• Manages compliance with data protection and privacy compliance activities within the group, region or market.
• Devises and delivers training on data protection and privacy issues.
• Assists Data Protection Officers in regulatory liaison activity.
• Provides advice on data protection risks arising from the collection and use of personal data.
• Oversees and undertakes research on data protection law and policy issues.
• Manages people, for example Data Protection Compliance Executives.
• Manages internal communications on data protection and privacy activities.
• Monitors and challenges performance and progress made against data protection compliance frameworks.
• Maintains ongoing and current knowledge of evolving data protection and privacy laws.
• Undertakes investigations in relation to potential or alleged non-compliances with data protection and privacy requirements.

Requirements:

• Law degree, with a Master’s or postgraduate qualification in Data Protection, IT Law or related fields considered an advantage.

• Minimum 5 years of experience in data protection, privacy or compliance roles within corporate environments, legal consultancy or the media/communications sector.

• Strong knowledge of GDPR and Portuguese legislation, including Law 58/2019, Law 41/2004 and the broader EU privacy framework.

• Experience handling core privacy operations such as data subject rights requests, DPIAs, data breach management and interactions with supervisory authorities.

• Familiarity with CNPD and EDPB guidance and the ability to apply regulatory decisions to practical scenarios.

• Experience drafting and implementing policies, procedures and training programmes related to data protection.

• Fluency in Portuguese and fluent English, with additional languages considered an asset.

• Registration with the Portuguese Bar Association valued but not mandatory.

• Strong analytical and problem‑solving skills with the ability to interpret complex legal issues.

• Excellent communication skills, capable of translating legal concepts into clear, accessible language for non‑legal audiences.

• High attention to detail and the ability to manage multiple priorities simultaneously.

• Proactive and autonomous working style combined with a collaborative approach across business areas.

• Leadership and team‑management capability, with the ability to guide and support others.

Preferred Requirements:

• Professional certifications such as CIPP/E, CIPM, CIPT or equivalent.

• Experience in multinational environments or corporate groups operating across multiple jurisdictions.

• Team leadership experience with demonstrated ability to manage and develop others.

• Familiarity with compliance tools such as OneTrust, TrustArc or similar platforms.

• Knowledge of the advertising, media or digital marketing sector