Group Data Protection Executive (9-Month FTC)

About the role

K3 Advisory Group, a private equity-backed advisory and professional services group, is hiring a Data Protection Executive for a 9-month fixed-term cover for maternity leave. The role sits within Group Legal and supports the Group Data Protection Officer and the wider Legal and Data Protection team by owning the day-to-day operation of key privacy processes, such as DPIAs, rights requests and supplier reviews. It is a practical, junior-to-mid-level position with autonomy over workflow, escalating legal, high-risk and regulated-business matters to the Group DPO.

Key responsibilities

• DPIAs and privacy by design: run the DPIA screening process, maintain the central DPIA register, review questionnaires, facilitate assessments with project and business teams, and escalate high-residual-risk, novel, international transfer, AI or special-category data cases to the Group DPO.
• Data subject rights requests: log and coordinate DSARs, agree search scope, track timetables and support redaction and preparation of responses.
• Personal data breaches: triage incidents, coordinate containment and investigation records, maintain the breach register and notification timetable.
• Supplier and DPA reviews: first-pass reviews of data processing agreements and supplier privacy due diligence, checking Article 28 UK GDPR requirements.
• Governance and advisory: support ROPA, data mapping, policy updates and privacy champions, act as contact for routine queries from non-regulated businesses, and monitor regulatory developments.

Required profile

• 1-3 years of practical data protection, compliance, legal operations or privacy experience.
• Hands-on experience with DPIAs, DSARs, breach logs or supplier privacy due diligence.
• Desirable: IAPP CIPP/E, CIPM, BCS or equivalent privacy qualification, or active progress towards one.
• Desirable: experience in professional services, financial services or a multi-entity group, and exposure to DPA negotiation, international transfers, AI governance or privacy-by-design reviews.

Required skills

• Working knowledge of the UK GDPR, the Data Protection Act 2018, PECR and the current UK data protection regime.
• Strong drafting, organisation, stakeholder management and document-review skills.
• Ability to manage deadlines, sensitive information and competing requests, and to maintain registers, trackers, MI and audit evidence.
• Desirable: familiarity with SharePoint, workflow tools and data-mapping or privacy-management platforms.

What we offer

• Negotiable basic salary pro-rated between £30,000 and £40,000 depending on experience.
• Hybrid or fully remote and flexible working arrangements.
• A collaborative environment within a growing Group, with exposure to a wide range of data protection matters and close work with experienced legal and compliance professionals.