Data Privacy Manager

About the role

The Data Privacy Manager will report to the Data Protection Officer and play a pivotal role in ensuring the responsible use of personal data across the organisation. Working in a hybrid setting, the role balances regulatory compliance with business needs, providing pragmatic privacy solutions.

Key responsibilities

• Rapidly assess, prioritise and triage complex privacy risks across initiatives, ensuring proportionate decision‑making.
• Provide expert advice on the Data Protection Act 2018, UK GDPR and related legislation, aligning compliance with commercial objectives.
• Challenge and influence senior stakeholders to embed privacy considerations early in projects.
• Lead Data Protection Impact Assessments (DPIAs) and privacy risk assessments, maintaining robust documentation.
• Utilise GRC Archer (or equivalent) to manage risk registers, track remediation actions and produce auditable evidence.
• Oversee incident triage, advise on breach thresholds, and coordinate escalation to the DPO.
• Produce insight‑driven reports on privacy risks, trends and control effectiveness for senior management.

Required profile

• Strong understanding of UK data protection law, UK GDPR and the Data Protection Act 2018.
• Proven ability to influence senior business leaders and negotiate risk‑based decisions.
• Excellent communication skills, capable of translating legal and technical concepts for non‑specialist audiences.
• Experience in conducting DPIAs and managing privacy risk assessments.

Required skills

• GRC Archer (or similar governance, risk and compliance platform).