Privacy Operations Manager

Overview

In this role you will lead operational privacy services to support Serco UK, reporting to the DPO. You’ll own and improve frameworks for Data Subject Rights, data breach management, DPIA governance, and privacy by design, ensuring clear, measurable, and scalable processes. You’ll collaborate across governance, legal, IT and business teams to tackle high‑risk or novel matters and drive continuous improvement. This is a hands‑on leadership role focused on turning compliance expectations into practical guidance and services with real business impact.

Pay / Benefits

• Company car
• Private healthcare
• Bonus scheme of 5% on target
• Flexible working considered
• Pension – 6%
• Career development training

Responsibilities

• Own and continuously improve the Data Subject Rights operating model with standards, escalation routes, performance monitoring and QA
• Maintain the data breach management framework with triage, assessment, documentation and lessons learned
• Lead DPIA governance, templates, workflows, adviser support and QA, embedding privacy by design
• Provide substantive operational privacy guidance for queries via the Privacy Office triage process
• Maintain playbooks, guidance and process documentation for business teams and the privacy network
• Monitor operational MI across DSRs, breaches, DPIAs and business queries to identify risks and improvement priorities
• Collaborate with Governance & Assurance, Information Governance, Legal, HR, IT and other operational teams
• Escalate precedent-setting, high‑risk or regulatory matters to the DPO with evidence and options

Key requirements

• Experience managing operational privacy, compliance, legal operations, information governance, risk or assurance processes
• Strong practical experience of Data Subject Rights, breach management and/or DPIA processes
• Working knowledge of UK GDPR, the Data Protection Act 2018 and operational privacy requirements
• Experience creating and improving frameworks, procedures, guidance, templates and service standards
• Judgement to manage complex stakeholder queries and recognise when escalation is needed
• Strong reporting, prioritisation and continuous improvement capability in a demanding operational environment

• Stakeholder management
• Judgement and decision making
• Analytical thinking and problem solving
• Data Subject Rights (DSR)
• Data breach management
• DPIA processes

…