Data Protection & Privacy Consultant (Hybrid)

About the role

We are seeking an experienced Data Protection & Privacy Consultant to join our growing team in London. The role combines hands‑on privacy operations with client‑facing consultancy, helping organisations across multiple sectors navigate complex data protection challenges.

Key responsibilities

• Act as a trusted advisor for clients on all data protection matters.
• Design, deliver and maintain privacy programmes, including DPIAs, LIAs, RoPAs and data‑mapping exercises.
• Identify and manage data protection and cyber‑risk exposures.
• Provide pragmatic advice on UK GDPR and international privacy regulations.
• Support data‑breach response, regulatory compliance and ICO engagement.
• Develop policies, governance frameworks and privacy controls.
• Deliver training, awareness sessions and act as an outsourced DPO where required.

Required profile

• 5+ years of experience in data protection or privacy roles.
• Strong working knowledge of UK GDPR (EU/international frameworks a plus).
• Proven experience delivering DPIAs, LIAs, RoPAs and data‑mapping projects.
• Experience managing incident response, breach handling and DSAR processes.
• Relevant IAPP certification (CIPP/E, CIPM or equivalent).

Required skills

• Hands‑on experience with OneTrust or similar privacy management platforms.
• Ability to configure and operate privacy‑tech tools.
• Strong communication and stakeholder‑management capabilities.

What we offer

• Competitive salary (£65,000‑£70,000) plus benefits.
• Hybrid working model (minimum two days in the London office).
• Opportunity to work with a diverse portfolio of clients across industries.
• Collaborative specialist data protection team.
• Exposure to cutting‑edge topics such as AI and privacy technology.