Assistant Manager, Privacy, Quality Risk and Security Services

Overview

In this role you support Deloitte’s Privacy Operations within the Quality Risk and Security community to help meet regulatory obligations and protect data. You will perform DPIAs/LIAs, assist with DSARs and data incidents, and advise the business on privacy considerations. You’ll back the Privacy Team with prioritisation, 1-2-1 coaching, and training, contributing to continuous service improvement. This is a cross‑functional, impact‑driven role in a values‑led, collaborative culture that emphasizes growth and integrity.

Pay / Benefits

• hybrid working policy
• world-class development and training
• focus on wellbeing
• supportive leadership
• opportunity to develop in privacy and risk
• collaborative environment

Responsibilities

• Support Privacy Operations in meeting regulatory obligations
• Conduct Privacy Risk Assessments (DPIAs/LIAs)
• Process Data Subject Rights Requests (DSARs, Erasure, Rectification)
• Assist with data incident investigations
• Provide privacy guidance for engagements and processing activities
• Support Privacy Analysts with day‑to‑day requests and 1‑to‑1 check‑ins
• Conduct research on evolving privacy regulations and best practices
• Contribute to CSI program and deliver metrics/reports to leadership
• Develop and deliver privacy training materials
• Participate in team meetings and knowledge sharing initiatives

Key requirements

• Basic knowledge of firm’s risk and data security controls (training provided)
• Proven experience in Privacy or related field
• Strong understanding of data privacy principles and regulations (UK DPA 2018, GDPR)
• Experience in DPIAs/LIAs, DSARs, and providing privacy advice
• Leadership experience desirable but not essential
• Excellent communication, interpersonal, and presentation skills
• Ability to work in teams and independently
• Strong analytical and problem-solving skills

• Strong communication
• Attention to detail
• Team player
• Privacy regulations knowledge (UK DPA, GDPR)
• DPIAs and LIAs
• DSAR handling

…