Senior Data Protection Adviser

Overview

In this role you help the University embed privacy management and information governance across the institution, supporting delivery of the Information Compliance Strategy. You will work with senior leaders to ensure compliance with UK GDPR and DPA 2018, while enabling responsible data use for education, research and administration. You’ll maintain key privacy registers, assess new projects, and lead data breach response and awareness initiatives. This is a chance to shape privacy practice in a large, complex organisation and influence cross‑functional teams with practical guidance.

Pay / Benefits

• friendly, diverse and supportive working environment
• hybrid working arrangement
• generous holiday entitlement (30 days + holidays)
• staff development and career progression opportunities
• range of benefits and rewards including fitness facilities and staff discounts

Responsibilities

• Maintain and develop the Information Asset Register and Register of Processing Activities (ROPA), and review Privacy Notices for accuracy and transparency
• Conduct Privacy Impact Screening and Assessments for new technology, research and other projects, assessing legal bases for processing and reviewing data processing agreements
• Provide expert advice to senior leaders and colleagues on complex or emerging data protection issues, and act as an escalation point for challenging compliance queries
• Support the Information Compliance Officers on complex casework, and deputise for the Data Protection Officer on time-critical operational matters as required
• Lead on data breach response procedures, and deliver privacy awareness training and guidance materials across the University

Key requirements

• significant, demonstrable experience of data protection within a large or complex organisation
• strong advisory and influencing skills
• ability to engage credibly with senior stakeholders on complex compliance matters
• confident communicator able to translate complex requirements into practical guidance
• sound independent judgement and ability to manage competing priorities

• advisory and influencing abilities
• clear and confident communication
• stakeholder relationship management
• UK GDPR / GDPR and DPA 2018 knowledge
• Information Asset Register (IAR) and Register of Processing Activities (ROPA) maintenance
• privacy impact assessments (PIAs)

…