Business Privacy Principal Specialist

About the role

Amadeus' Hospitality organization is looking for a Business Privacy Principal Specialist to embed privacy and data governance into how solutions are designed, partners are engaged and customers are supported. You will act as a trusted privacy advisor, turning requirements into practical, risk-based guidance and working with teams such as the Digital Trust Office, Legal and the Data Office.

Key responsibilities

• Lead the implementation of privacy policies, standards and governance requirements within the Hospitality business.
• Identify and assess privacy risks, define mitigation measures and promote Privacy by Design.
• Maintain and review privacy documentation and records of processing activities.
• Advise business stakeholders on privacy, legal and operational matters.
• Coordinate internal and external privacy audits and contribute to governance committees.
• Support data governance frameworks, policies and catalogues, and integrate privacy into vendor and customer relationships.
• Communicate privacy updates, key metrics and emerging risks to stakeholders and leadership.

Required profile

• Bachelor's degree or equivalent in IT, Computer Science, Law, Risk Management or a related discipline.
• Around five years of relevant experience in privacy, governance, risk, compliance, information security, data governance or AI governance.
• Strong knowledge of GDPR, CCPA/CPRA, Privacy by Design and ISO 27701.
• Experience with privacy assessments, vendor risk, incident response and privacy-by-design.
• Fluent English; Spanish is an advantage.

Nice to have

• CIPM, CIPP, CIPT or ISO 27701 Lead Implementer certifications.
• DAMA certification or data governance experience.
• Knowledge of cookie consent platforms and familiarity with tools such as Archer or Collibra.

What we offer

• A global company with a hybrid working model.
• Ongoing learning through on-the-job training and formal activities.
• A caring, diverse and inclusive environment.