Company Profile:

Lebara is a dynamic and fast-moving private equity owned telecommunications company providing services in many countries around the world. The business has a clear growth agenda with significant investment taking place in technology and its people. We provide pay-as-you-go and contract based mobile SIM products. We connect you with the people that matter most in your life on a network you can rely on, with great value and excellent customer experience. We operate in the UK, France, Denmark, the Netherlands and Germany with an annual turnover of 400m and have over 2.5m active customers. We also have brand license agreements for use of our trademarks in Australia, Switzerland, Saudi Arabia and Spain. We have created a challenging, fast-paced work environment. We make a positive difference to our customers and encourage all our teams to strive toward this goal. Lebara is a fun, engaging place to work where strong emphasis is placed on teamwork as well as individual achievement.

Responsibilities:

- Data Subject Requests (DSRs): Manage a volume of 80+ DSRs monthly; coordinate with data teams and business functions to compile, verify, and deliver compliant responses across GDPR and equivalent jurisdictions
- Compliance Documentation: Own and close the documentation backlogmaintaining and creating privacy impact assessments, data processing records, retention schedules, and regulatory justification for data use across all business activities
- Due Diligence & Exit Readiness: Maintain and track the due diligence actions list (~36 active items)



required for M&A; or exit scenarios; ensure Lebara's compliance posture is transaction-ready
- Cookie & Marketing Compliance: Manage cookie consent flows, vendor compliance, and marketing permission tracking; ensure alignment with GDPR, ePrivacy Directive, and national cookie laws across five markets
- Regulatory Risk Management: Assess and document compliance risks for new products and geographic expansions (e.g., Travel eSIM launches); work with InfoSec and Legal to identify mitigations
- Breach & Incident Management: Handle data breach notifications, GDPR incident reporting, and post-incident root-cause analysis; liaise with InfoSec and external authorities as required
- Compliance Tool Ownership: Manage OneTrust platform administration, vendor assessment workflows, and compliance vendor onboarding; maintain vendor registers and DPA/processing records
- Stakeholder Liaison: Serve as the compliance point of contact for cross-functional teams (Legal, InfoSec, Product, Marketing, Customer Ops); translate regulatory requirements into operational guidance

Skills & Experience:

- 4+ years in data protection, privacy compliance, or regulatory compliance roles
- Deep working knowledge of GDPR and equivalent regulations (LGPD, CCPA/CPRA,



or equivalent); practical experience handling DSRs at volume
- Competence with privacy management tools (OneTrust experience strongly preferred)
- Strong vendor assessment and due diligence experiencecomfort evaluating contracts and data processing terms
- Ability to manage competing priorities and high-volume workload without losing accuracy
- Explicit communication across technical, legal, and business audiences; comfort explaining compliance in business terms

Highly Desirable

- Experience in a telco, SaaS, or multi-jurisdiction business environment
- Familiarity with ePrivacy/cookie compliance and consent management
- Understanding of data breach notification processes and incident response workflows
- Knowledge of travel, financial services, or other regulated verticals
- Experience with Microsoft ecosystem tools and platforms

Personal Attributes

- Detail-oriented and process-driven, but pragmaticable to balance rigor with business timelines
- Proactive in identifying compliance gaps and suggesting process improvements
- Self-sufficient; able to research and interpret regulatory guidance with limited hand-holding
- Collaborative; able to influence teams without formal authority

Behavioural Fit:

- Process-driven
- Ability to work in a cross-functional, multi-cultural team and in a collaborative environment with minimal supervision
- Ability to influence stakeholders quickly
- Ability to multi-task and cover breadth of DG initiatives

Role Key Performance Indicators:

- Operational volume and timeliness
- Quality and accuracy
- Risk and strategic

📌 Data Compliance Analyst (Hyderabad)
🏢 Lebara Media
📍 Hyderabad