This senior leadership role for a global consumer-facing travel and leisure organisation is responsible for shaping the data protection strategy across a global business landscape, reporting directly to the GC. It will require 2-3 days per week in the office. Leading the privacy team of two, the role champions the implementation of global best practices, balancing risk management with operational efficiency. The ideal candidate does not have to be a lawyer, but does have to have held a previous senior privacy position and have previous people management experience. Proven experience in policy development, breach response, regulatory engagement, and staff training is essential, along with a working knowledge of cybersecurity, PCI DSS, and information security standards. Strong communication skills are key, as is the ability to influence across all levels of the organization. The role involves close collaboration with internal stakeholders across legal, IT, HR, operations, and commercial functions, as well as external regulators and industry bodies.