Job Description:

Data Protection and Privacy Specialist

To provide practical privacy and data protection support across UK operations, helping the organisation manage day-to-day privacy risks, improve core processes and maintain clear, consistent ways of working.

The role will apply general privacy knowledge and good stakeholder management skills to support incident learning, data subject rights activity, assurance evidence, policy and procedure updates, training inputs and continuous improvement across the Privacy Team and wider business.

Privacy advice and operational support

• Provide practical guidance on routine privacy and data protection matters, including incidents, data subject rights requests, complaints, DPIAs, records of processing activity, supplier queries and information sharing.
• Support the Privacy Team in interpreting policies, procedures and legal requirements into clear, proportionate and workable actions for operational teams.
• Maintain good records of advice, decisions, actions and evidence so that privacy activity can be tracked, reported and assured.

Process improvement and assurance

• Help identify opportunities to simplify, standardise and improve privacy processes, templates, guidance, trackers and reporting outputs.
• Support reviews of incident themes, root causes, corrective actions and lessons learned, helping to turn learning into practical prevention and assurance activity.
• Contribute to management information, evidence packs, control checks and assurance reporting to show that privacy risks are being managed effectively.

Stakeholder engagement and management

• Build positive working relationships with operational teams and enabling functions, helping them understand privacy requirements and apply them in day-to-day work.
• Coordinate input from stakeholders, follow up actions, clarify ownership and escalate issues where support or decisions are required.
• Prepare clear updates, briefings and responses for internal governance, operational stakeholders, clients or other external parties where required.

Team contribution and continuous improvement

• Support the Privacy Team with day-to-day priorities, including advice, triage, action tracking, procedure updates, awareness activity and evidence management.
• Contribute to a proactive, prevention-focused privacy culture by sharing learning, highlighting recurring issues and supporting practical improvement activity.

Essential:

• Good general knowledge of UK data protection law and core privacy principles, with the ability to apply this knowledge in a practical business setting.
• Experience working in data protection, privacy, compliance, risk, assurance, legal, information governance or a related operational environment.
• Experience supporting privacy processes such as incident management, data subject rights requests, complaints, DPIAs, records of processing activity, supplier queries, training or assurance activity.
• Ability to maintain accurate records, trackers, action logs, evidence trails and management information.

Preferred:

• Recognised data protection qualification such as ISEB, CIPP/E, CIPM or equivalent.
• Experience supporting process improvement, control checks, lessons learned activity, audit, assurance or operational and behaviour change.
• Experience working with multiple stakeholders across operational, corporate or regulated service environments
• Working awareness of information security, public-sector contracts, client assurance or regulated service delivery would be helpful.