Senior Risk & Compliance Consultant (Data Privacy)

Overview

In this role, you will advise clients on data protection and privacy, supporting a multi-client portfolio across sectors. You’ll provide proactive privacy guidance and reactive support for incidents such as breaches andDSRs, balancing regulatory requirements with business aims. You’ll lead risk assessments, DPIAs, policy development, and supplier/privacy due diligence, while mentoring a small team. The position sits within a global, collaborative firm focused on pragmatic, evidence-based privacy outcomes.

Pay / Benefits

• competitive discretionary annual bonus
• life assurance of four times salary
• income protection up to five years (75%)
• single private medical insurance
• generous pension scheme
• 25 days annual leave (27 after five years)`,`flexible benefits programme

Responsibilities

• Conduct privacy assessments, DPIAs, audits, and policy development to improve clients’ privacy posture
• Advise on AI and automated decision-making impacts on privacy
• Perform third-party/privacy due diligence and ongoing assurance for suppliers
• Produce structured audit/assessment reports with actionable recommendations
• Provide incident response support for data breaches and data subject rights requests
• Deliver tailored privacy training and education for varied audiences
• Collaborate with legal, information security, and business teams to embed privacy in operations
• Maintain awareness of GDPR/UK GDPR and evolving privacy guidance
• Manage a small team of consultants

Key requirements

• Proven experience in busy, multi-client environments with hands-on privacy advisory and incident response
• Ability to understand diverse business models, risk profiles, and regulatory regimes
• Experience handling data breaches and DSARs
• Experience assessing AI/automated processing with privacy considerations
• Experience conducting third-party privacy risk assessments
• Capability to produce high-quality written outputs (audit/assessment reports)
• Experience designing and delivering privacy training
• Strong communication skills with both technical and non-technical audiences
• Broader business understanding aligning privacy with operational realities
• Experience across regulated and non-regulated sectors

• calm under pressure
• clear, jargon-free communication
• cross-functional collaboration
• Privacy regulations (GDPR, UK GDPR)
• DPIAs and risk assessments
• Data processing due diligence

…