Data Protection Manager

Overview

In this role, you will lead data protection across the firm, ensuring regulatory compliance and governance. You’ll partner with the Risk Director to manage data protection matters and advise on privacy implications for new initiatives. You will own DSAR management, data mapping, and DPIAs, driving improvements to reduce data breach risk. This position sits within a growing compliance team that supports a positive, career‑oriented culture. You will shape training and communications to embed privacy across the firm.

Responsibilities

• Update and monitor firm policies and procedures
• Manage Subject Access Requests and other data requests
• Create data protection impact assessments
• Oversee EU Data Representative appointments and renewals
• Advise on data protection/PECR implications of new business initiatives
• Maintain Data Map and risk assessments
• Advise on reported data breaches
• Identify opportunities to enhance protection of sensitive data and reduce breaches
• Highlight data breach trends to Data Compliance Officer
• Keep policies up to date with changing data protection laws
• Lead data protection training and staff communications

Key requirements

• Strong knowledge of UK data protection laws
• Experience managing Subject Access Requests
• Experience writing data-focused policies and procedures
• Experience advising on data protection breaches and issues
• Good knowledge of international data protection laws for overseas sharing/transfers
• Previous experience working at a law firm

• collaboration with cross-functional teams
• strong communication
• proactive and independent work style
• Data Subject Access Request management
• Data protection impact assessments (DPIAs)
• Data Map / records of processing activities maintenance

…