Data Protection Manager

About the role

This permanent, UK‑based position offers hybrid working and occasional travel. You will join a global organisation’s legal and governance function, reporting to senior leadership within the data protection team. The role focuses on operational compliance, risk management, and embedding privacy, AI governance and information management best practices across the business.

Key responsibilities

• Oversee day‑to‑day privacy and information governance activities, ensuring alignment with regulations and internal frameworks.
• Manage data breaches and information governance incidents, handling investigation, documentation and regulatory reporting.
• Provide hands‑on support for DPIAs and privacy risk assessments, embedding privacy‑by‑design principles.
• Support AI governance processes, reviewing higher‑risk use cases of emerging technologies.
• Act as primary contact for privacy queries, triaging and escalating issues as needed.
• Lead end‑to‑end handling of data subject rights requests (access, erasure, rectification, etc.).
• Maintain compliance documentation such as ROPA, risk registers and privacy notices.
• Deliver internal training, awareness initiatives and regular reporting to senior stakeholders.
• Contribute to continuous improvement of privacy, AI and information governance processes.

Required profile

• Proven experience as a privacy professional in a complex, international organisation.
• Strong working knowledge of UK GDPR, Data Protection Act 2018 and related privacy frameworks.
• Familiarity with PECR, FOI and international data‑protection considerations.
• Experience managing DPIAs, incident response and data subject rights requests.

Required skills