Data Protection Manager

About the role

The Data Protection Manager will join the international legal team in Uxbridge, reporting to the Privacy Counsel. This interim position supports all data protection initiatives, ensuring compliance with UK GDPR and related regulations across the retail organisation.

Key responsibilities

• Develop and implement data protection policies and procedures aligned with UK GDPR and other applicable regulations.
• Serve as the primary point of contact for data protection and privacy matters.
• Respond to Data Subject Access Requests (DSARs) and draft Data Protection Impact Assessments (DPIAs).
• Advise marketing teams on PECR compliance and conduct ROPA reviews.
• Conduct regular audits to identify risks or breaches and maintain records of processing activities.
• Provide training and expert advice to internal teams on data protection best practices.
• Monitor legislative changes and embed privacy‑by‑design principles in cross‑functional projects.

Required profile

• Comprehensive knowledge of UK GDPR and other relevant jurisdictions.
• Experience managing data protection compliance within a consumer‑focused business.
• Ability to handle the full spectrum of privacy activities, from DSAR handling to senior stakeholder advice.
• Strong analytical skills with a focus on risk identification and mitigation.
• Excellent communication skills and discretion when handling sensitive information.

Required skills

• UK GDPR compliance
• PECR knowledge
• Data Protection Impact Assessment (DPIA) preparation
• Data Subject Access Request (DSAR) handling
• Records of Processing Activities (ROPA) management

What we offer

• Competitive salary of £70,000‑£75,000 per annum.
• 12‑month fixed‑term contract.
• Opportunity to work within a leading FMCG organisation.
• On‑site role at the UK headquarters, a short walk from the Piccadilly line.