Privacy Manager

Job Profile We are looking for a Privacy Manager to play a key role in supporting and enhancing our global privacy programme. This position will take ownership of a broad range of privacy activities, including data subject requests, privacy incident management, DPIAs, vendor and data processing reviews, regulatory compliance, and privacy governance.

Vista is the world’s leading global business aviation company, providing worldwide business flight services through its network of subsidiaries and a team of over 4,000 experts. A global group headquartered in Dubai, Vista integrates a unique portfolio of companies to offer asset-free services that cover all key aspects of business aviation, including guaranteed and on-demand global flight coverage, subscription and membership solutions, and trading and management services.

A career at Vista means stepping into an environment where you’re trusted with real autonomy and responsibility from day one. Whether you're keeping our aircraft airworthy, flying our clients across the globe, or working in one of our corporate teams, you’ll move fast, deliver impact quickly, and grow through hands ‑ on learning and close collaboration within a supportive global community.

Your Responsibilities

• Manage the data subject request (DSR) process, ensuring timely and compliant responses.
• Lead first-line privacy incident response, including risk assessment, documentation and coordination with Information Security.
• Manage, improve and maintain core privacy infrastructure, including data mapping, the Record of Processing Activities (ROPA) utilising our privacy platform.
• Review and negotiate Data Processing Agreements, vendor security questionnaires and international data transfer documentation.
• Manage the maintenance of privacy notices, cookie notices, consent mechanisms and internal privacy policies and procedures.
• Monitor regulatory developments across applicable jurisdictions and maintain related compliance tracking.
• Coordinate Data Protection Impact Assessments (DPIAs) and support the resolution of privacy risks identified in new projects and features.
• Support the design and delivery of privacy training, internal audits and privacy risk reporting.
• Document and maintain privacy processes, playbooks and standard operating procedures.
• Operate as a trusted advisor to the business on privacy matters. Establish effective business relationships and maintain knowledge of operating procedures, escalating complex matters as needed .

Required Skills, Qualifications, And Experience

• 3-5 years’ experience in a privacy/data protection role, ideally within a multijurisdictional organisation.
• Strong working knowledge of the GDPR and UK GDPR essential; familiarity with other data protection regimes (e.g. US state laws, UAE) is an advantage.
• Hands-on experience with OneTrust or a comparable privacy management platform.
• Experience managing data subject requests and privacy incidents.
• Experience reviewing and negotiating Data Processing Agreements and international transfer documentation.
• Excellent drafting and written communication skills, with the ability to translate legal requirements into clear, practical guidance and to effectively interact with internal and external stakeholders, including senior leadership.
• Process-oriented, with the ability to design and implement structured, repeatable workflows.
• Team player who can operate globally, cross-functionally, and at all levels of the organisation, taking ownership and demonstrating initiative.
• Highly accurate and good attention to detail.
• Strong planning and organisational skills, with ability to manage own workload in a pressurised environment and work to tight deadlines.
• Sound judgement on risk and proportionality.
• Comfortable working in a fast-paced, changing environment.