JOB NUMBER: JB04664
VACANCY NUMBER: ADV05807
SHARE: https://www.careers.msccruises.com/vacancy/ADV05807/privacy-manager-genoa
ORGANIZATION: MSC PROCUREMENT & LOGISTICS S.P.A.
BUSINESS AREA: Office
LINE MANAGER: Data Protection Officer
Are you passionate about privacy and data protection? Do you thrive in a dynamic, global environment, where your expertise directly influences the protection of millions of guests, crew members, and corporate operations worldwide?
MSC Cruises is on a mission to raise the bar in privacy excellence, and we are looking for a Privacy Manager to join our Privacy Office in Genoa, Italy. This role is not just another compliance position-it's an opportunity to lead strategic privacy initiatives, shape global privacy programs, and challenge the status quo in data protection across our entire Cruise Division.
Why join us?
Global impact: Work at the intersection of privacy, cybersecurity, and international regulations, ensuring compliance across multiple jurisdictions.
Strategic Role: Go beyond compliance—drive innovation in privacy governance and help shape our privacy-first culture.
Career Growth: Gain exposure to top leadership, influence key decisions, and expand your expertise in a fast-paced corporate environment.
Innovate & Lead: Challenge existing processes, enhance privacy frameworks, and make an impact at a company that truly values privacy.
Lead & Implement Privacy Strategies:
• Support the Data Protection Officer (DPO) in driving MSC Cruises’ Global Privacy Program, ensuring alignment with GDPR and international data protection laws.
• Take charge of privacy projects from start to finish—from planning to execution—balancing scope, budget, and strict deadlines.
• Challenge the status quo—drive privacy accountability and elevate compliance standards across the organization.
Operational Excellence & Risk Mitigation:
• Conduct privacy risk assessments, identifying opportunities for stronger data protection measures.
• Oversee and audit privacy operations, ensuring compliance with GDPR, local privacy laws, and internal policies.
• Perform benchmarking & research, identifying best practices to enhance MSC Cruises’ privacy policies and procedures.
• Manage and enhance the Record of Processing Activities (RoPA) and other key privacy documentation.
Collaboration & Advisory Role:
• Act as a trusted privacy advisor to business functions, guiding them on complex data protection matters.
• Negotiate data protection terms & contracts directly with vendors, ensuring robust privacy safeguards.
• Collaborate with cross-functional teams (IT, Legal, Security, HR, and more) to embed privacy-first thinking into company processes.
Compliance & Incident Response:
• Ensure timely handling of Data Subject Rights (DSR) requests & data breaches, in line with global privacy regulations.
• Monitor emerging privacy laws & enforcement trends, advising leadership on strategic compliance adjustments.
• Support the team in preparing privacy policies, DPIAs, TIAs, privacy notices, and training materials.
• Privacy Expert: In-depth knowledge of GDPR, global data protection laws (US, LATAM, APAC) and enforcement trends.
• Experience: at least 4-6 years in privacy, ideally in a consultancy, law firm, or multinational corporate setting. Experience in-house is a plus.
• Strategic & Analytical Thinker: Ability to translate complex privacy regulations into business-friendly solutions.
• Project Management Skills: Strong organizational skills, able to lead multiple projects simultaneously. Certification (PMP, PMI) is a plus.
• Tech-Savvy: Understanding of privacy-enhancing technologies, security measures, and process automation. Experience with Privacy Management Software (e.g., OneTrust) is a plus.
• Excellent Communicator: Ability to present and influence at all levels, from operational teams to senior leadership.
• Fluent in English (French/German/Italian is a plus).
• Privacy Certifications (CIPP/E, CIPM, CIPT) are highly desirable.
Right to work in Italy.
In the course of our recruitment and selection process, we may make your Personal Information available to third parties such as recruitment agency, intermediaries and other business partners.