Data Protection Manager - 7 month FTC

We’re IAG Loyalty – one organisation with two ambitious, growing divisions across Loyalty and Holidays. Each has its own goals, strategy and team, but together we’re united by a shared vision to create a more rewarding world of travel and experiences.

Our Loyalty division is home to Avios, the global loyalty currency, enabling millions of members to collect and spend rewards across travel, retail and financial services.

Our Holidays division, including British Airways Holidays and Iberia Vacaciones, connects customers to thousands of destinations worldwide through seamless travel experiences.

We're on an exciting journey of growth and transformation – and we'd love you to be part of it.

The opportunity ✨

The Data Protection team, sitting in the Legal Operations and Compliance Team, is responsible maintaining and shaping the IAG Loyalty’s Data Privacy Programme, ensuring compliance with applicable regulation and internal policies across a dynamic and fast-paced organisation.

We're now looking for a Data Protection Manager to join the team on a 7 month fixed-term contract

Reporting to the Data Protection Officer, you'll play a crucial role in embedding data protection principles through the business. Your responsibilities will include driving a Privacy by Design approach, ensuring that data privacy is integrated into new initiatives, projects, and existing processes. You will have the chance to influence and support the business in addressing complex data privacy challenges, promoting a culture of awareness, managing data protection risks, and safeguarding personal data in today’s evolving regulatory landscape.

This role will work as part of our Loyalty Division and is based in our London office.

We call our approach to hybrid working The Blend — it's about giving you the flexibility to choose where you do your best work, while staying connected with your team and the wider business. This means you'll be required to spend at least two days per week in the office, with the rest of the time working from home.

What you’ll get up to 🌠

You'll support the ongoing compliance with Data Protection requirements within IAG Loyalty and its businesses, including the following areas:

• Data Privacy Governance: Support the Data Protection Officer in the development and implementation of the Data Privacy Programme and the maintenance of Data Protection Policies and guidelines across the various business.

• Training and Awareness: Delivery of training and awareness to IAG Loyalty colleagues to build a culture of Data Privacy within IAG Loyalty and its subsidiaries.

• Data Subjects Rights: Lead the coordination and management of Data subject Rights requests, engaging when required with internal stakeholders and Group Companies.

• Data mapping and register: Assist in the maintenance of Records of Processing Activities.

• Advising colleagues: Provide advice to colleagues across the different businesses in relation to Data Privacy on new and existing projects, product proposals, new ventures and business as usual activities. Provide advice, guidance and input into Data Privacy Impact Assessments and Legitimate Interest Assessments, as well as ensuring all data protection principles are met, including transparency.

• Third Parties: Support the provision of data protection contractual terms when working personal data with third parties working closely with the Contracts Team, as well as due diligence process along the Security Team.

• Data Breaches: Assist with the investigation of data breaches and complaints, working closely with the Data Protection Officer and the Risk Team while supporting the business.

What we need from you 💡

You'll know about the data privacy landscape, the pertinent approaches and the likely challenges. Strong stakeholder management skills and a demonstrable track record of successfully influencing without direct control will be key to your success.

• Experience in data protection, privacy, or related compliance roles, ideally within a complex environment.

• Experience of operational application of EU and UK privacy law, including the GDPR, UK DPA 2018 and PECR.

• Knowledge of data management systems.

• Privacy and/or Information Security qualification (e.g. CISSP, CISM, CIPP/E, CIPM, CIPT, ISEB) are desirable.

• Strong analytical and problem-solving skills, using original thinking to find solutions to potential issues and using own discretion to find the balance between data protection compliance and the operational side of the processes.

• The ability to work remotely, be self-organised, prioritisation skills and to independently manage the workload.

• Ability to work under pressure and respond to different requirements often within tight deadlines across the business.

We might not be right for you if:

• You only want to focus on your to-do list; we're a small, high-performing team and we help each other to succeed.

• You value perfection over fast iteration and progress; IAG Loyalty moves fast, we learn and iterate as we go, and our environment isn't right for everyone.