Data Privacy Manager

Overview

In this role, you will report to the Data Protection Officer and help enable responsible use of personal data while controlling privacy risks. You will bridge business strategy, risk management, and regulatory compliance, triaging privacy issues and advising senior stakeholders. You will use governance tools such as GRC Archer to identify, prioritise, and evidence privacy controls. The position emphasizes accountability, timely incident handling, and clear, actionable risk insights for governance committees. This is a chance to shape privacy posture in a complex organisation with strong regulatory focus.

Responsibilities

• Rapid privacy risk triage and advisory across initiatives
• Provide compliant, pragmatic advice on UK GDPR and DPA 2018 while balancing commercial needs
• Lead DPIAs and privacy risk assessments aligned to risk appetite
• Utilise GRC Archer to manage risk registers, remediation actions, and evidence of compliance
• Oversee data incidents triage, escalation, and remediation actions
• Produce insight-driven reporting on privacy risks and control effectiveness for senior management
• Develop and improve data protection policy framework and controls
• Track KRIs and maintain compliance documentation (e.g., ROPA) for audit readiness
• Drive governance process improvements leveraging automation and Archer

Key requirements

• Significant experience in privacy, risk, or compliance in large organisations
• Strong knowledge of UK GDPR and DPA 2018 in business environments
• Hands-on experience with GRC platforms (preferably RSA Archer)
• CIPP/E, CIPM, or CIPT or similar professional qualifications

• Risk triage under pressure
• Stakeholder challenge and negotiation with senior audiences
• Strong business acumen and decision-making
• GRC Archer (RSA Archer)
• DPIAs and privacy risk assessments
• Privacy by design and governance controls

…