Data Protection Manager

Overview

In this role you will strengthen UK GDPR and data protection across the business, partnering with the DPO and Data Protection Manager to scale compliant processes. You’ll shape the technical landscape of data protection and build tools to support teams delivering customer and internal solutions. You’ll lead DPIAs, RoPA updates, SARs handling, and training, while managing third‑party risk and breaches. The position sits within Product & Technology, contributing to a fast-growing, customer‑centric organisation that values autonomy and practical, secure innovation.

Responsibilities

• Develop data protection strategy, policies, and tooling to ensure compliance with UK GDPR, Data Protection Act 2018, PECR, and related laws
• Advise on privacy across cross-functional teams including software, finance, marketing and business development
• Lead DPIAs, maintain RoPA, and conduct LIAs
• Own end-to-end Subject Rights Management (SARs and related rights)
• Manage data breach investigations, reporting, and ICO communications
• Support business development with customer data protection agreements and inquiries
• Conduct third‑party due diligence to manage vendor risk
• Deliver engaging data protection training and awareness campaigns
• Monitor regulatory landscape and report on compliance and risk

Key requirements

• Passion for Data Protection with proven compliance delivery in a fast-paced business
• Experience with software product teams building bespoke software for customer/internal solutions
• Familiarity with Google Workspace and Slack
• Ability to explain data protection concepts clearly to non-experts
• Forward‑looking, self-motivated, capable of driving initiatives to implementation
• Experience in a pressured environment with high attention to detail

• Clear communication
• Proactive mindset
• Attention to detail
• UK GDPR, Data Protection Act 2018, PECR
• DPIA, RoPA, LIAs
• SARs and Subject Rights Management

…