- Location
- Remote (UK)/Reading · Reading, England, United Kingdom
- Workplace
- Remote
- Department
- Finance & Compliance
- Seniority
- Manager
- Source
- Greenhouse
Description
Hiring Manager - Michael Dix
Closing Date - 6th August 2026
The Opportunity
We're looking for a Data Protection Manager on a fixed term basis, to join our Compliance team and play a key role in ensuring compliance with UK Data Protection regulations and emerging AI governance requirements. Reporting to the Senior Compliance Officer and working closely with stakeholders across the business, you'll help drive a culture of privacy, compliance, and responsible innovation.
This is a great opportunity for someone who enjoys partnering with the business, influencing decision-making, and helping shape best practice in both data protection and AI governance.
What You'll Be Doing
As our Data Protection Manager, you will:
- Act as a subject matter expert, providing guidance on data protection and AI governance matters across the business
- Support and advise teams on Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments and vendor risk assessments
- Assist with the investigation and management of data incidents and breaches
- Take ownership of Data Subject Rights Requests (DSRs), ensuring regulatory deadlines are met
- Maintain Records of Processing Activities (ROPAs), including new and AI-related processing activities
- Develop, review and enhance data protection and AI governance policies, procedures and guidance
- Review Data Processing Agreements (DPAs) and assess privacy and AI-related risks during procurement activities
- Design and deliver engaging training and awareness programmes across the organisation
- Support customer audits, due diligence questionnaires and assurance activities
- Manage and enhance the privacy programme management platform, identifying opportunities for continuous improvement
About You
- You will have a minimum of two years' hands-on operational experience in data protection
- A strong working knowledge of UK GDPR, Data Protection Act 2018 and PECR
- Experience supporting DPIAs, risk assessments and privacy governance programmes
- Excellent stakeholder management and communication skills
- The ability to interpret legislation and apply practical solutions within a commercial environment
- A professional data protection qualification such as CIPP/E, CIPM, BCS Data Protection Certificate or PDP Practitioner Certificate in Data Protection is highly desirable
Skills
ComplianceProcurementGDPR
