OVERVIEW:
At Gymshark, data is more than information, it's trust. As our Governance & Privacy Analyst, you'll play a key role in protecting that trust by helping us ensure personal data is handled responsibly, ethically and in line with evolving global regulations.
Sitting within our Data Governance team, you'll work at the intersection of privacy, technology, compliance and business operations. You'll be a trusted advisor across the organisation, driving best practice, supporting privacy initiatives and helping to shape how data is governed across Gymshark.
From managing privacy operations and supporting compliance programmes to influencing stakeholders and preparing for emerging regulations, you'll help keep our data practices robust, scalable and future-ready.
WHAT YOU'LL BE DOING:
- Owning and managing day-to-day privacy operations, including individual rights requests (DSARs), privacy queries and data breach processes.
- Maintaining and improving key privacy and governance documentation such as privacy notices, processing agreements, policies and procedures.
- Supporting Data Protection Impact Assessments (DPIAs) and wider privacy risk assessments across the business.
- Partnering with teams across Gymshark to embed privacy-by-design principles into projects, processes and new initiatives.
- Acting as a trusted subject matter expert, providing guidance on data handling, governance and regulatory requirements.
- Supporting compliance with GDPR, PECR and other relevant privacy regulations across multiple territories.
- Helping to manage Records of Processing Activities (RoPA), retention schedules and governance controls.
- Delivering engaging education and awareness initiatives to strengthen data privacy knowledge across the business.
- Supporting governance reviews, privacy audits and continuous improvement activities.
- Assessing privacy risks associated with new technologies, vendors and business processes.
- Collaborating with Legal, Security and Technology teams to ensure data is managed safely and responsibly.
- Supporting Gymshark's evolving approach to AI governance, data ethics and emerging regulatory requirements.
WHAT YOU'LL NEED:
Essential Criteria:
- Proven experience working within Data Privacy, Data Protection, Governance or Compliance.
- Hands-on experience managing DSARs, DPIAs, privacy incidents and data protection processes.
- Strong working knowledge of privacy legislation such as GDPR, PECR and other global data protection regulations.
- Experience developing, maintaining and improving governance policies, frameworks and procedures.
- The ability to interpret regulation and translate it into practical business guidance.
- Excellent stakeholder management skills with the confidence to influence and collaborate across all levels of the organisation.
- Strong analytical and problem-solving skills, with the ability to investigate issues and drive solutions through to completion.
- A proactive mindset with a passion for continuous improvement and operational excellence.
- The ability to balance commercial objectives with privacy, compliance and risk management requirements.
- A genuine interest in emerging technologies, data ethics and areas such as AI governance and digital privacy.
- Experience working alongside Legal, Technology, Security or Risk teams would be highly advantageous.
CLOSING DATE:
Monday 24th August 2026
LOCATION:
Please note this is a hybrid role and requires the successful candidate to attend at least 3 days a week in GSIQ, Solihull, UK.
BELONGING AT GYMSHARK.
Our mission is to be a place where everyone belongs. We're an equal opportunities employer, and for us that means we always strive to be as inclusive as possible in all aspects of employment, right from your application. We're committed to finding reasonable adjustments* for candidates with specific needs or have a disability during our recruitment process, and all applicants will be considered fairly and equally. We do not tolerate discrimination of any kind. *If you'd like to request a reasonable adjustment please email [email protected].
ABOUT US.
We're here to unite the conditioning community. We believe that putting the sweat in today, prepares us for tomorrow. So, we give people the tools they need to reach further, go faster, be stronger. We celebrate those who show up – for themselves – to be their physical or mental best, whatever that means for them. It's what we want for our community, and our team. A team that's growing rapidly around the world. A collective of talented individuals working together to invent Gymshark's future. Our plans are ambitious, and we're looking for people who want to join us for the ride – our growth will be your growth.
THE PERKS.
Standard benefits include:
- Performance-based Bonus opportunity
- Funded Healthcare benefit
- 25 days holiday, additional day for your birthday & Bank Holidays
- Contributory Employer pension scheme
- Flexible benefits programme – including salary sacrifice EV scheme, dental insurance, cycle to work, tech scheme, holiday trading
- Gymshark Employee Discount & long service awards
- Access to High Street cashback and discounts
- Financial, Physical and Mental Wellbeing Support
- Enhanced Family Leave package
- Life Assurance
Office location specific benefits include (IQ):
- Gym Membership to The Lifting Club (LC)
- Onsite lunch provision & coffee bars
- EV charge points available
Office location specific benefits include (LDN):
- Funded multi-site fitness membership
Note: The bonus program and benefits have certain eligibility requirements. Gymshark reserves the right to amend these programs in whole or in part at any time without advance notice.
