domesticandgeneral
Senior Data Protection Manager
- Compensation
- Not disclosed
- Location
- Wimbledon, UK
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- Not specified
- Category
- Not specified
- Posted
Skills
Must have
- Extensive experience in data privacy management in a senior or leadership role.
- In‑depth knowledge of applicable data privacy laws, e.g. UK GDPR, EU GDPR, DPA 2018, PECR/e-Privacy, and relevant industry standards.
- Proven experience managing data privacy risk, DPIAs, incident response, and regulatory interactions.
- Strong understanding of information security principles and how they relate to privacy.
- Excellent communication, influencing, and stakeholder management skills.
- Ability to interpret complex legislation and translate into practical business advice.
- Recognised data privacy qualification at practitioner level is preferred, such as CIPP/E, CIPM, CIPT, BCS Data Protection, or equivalent.
Full description
Senior Data Protection ManagerLocation: Flexible on location with visits to our office in Wimbledon as and when required.Salary: PermanentContract: Full Time
We have an exciting opportunity for Senior Data Protection Manager to join our Risk & Compliance team here at Domestic & General. The role plays a pivotal role in overseeing the organisation’s data protection and privacy programme. It will also ensure compliance with relevant applicable data privacy laws, including the General Data Protection Regulation and other data privacy regimes.
Key Responsibilities:
- Provide support to the GDPO to help shape the design, implementation, and continuous improvement of the organisation’s data privacy framework.
- Monitor compliance with data privacy legislation, policies, and internal controls.
- Maintain and oversee RoPA, DPIAs, LIAs and associated documentation.
- Develop and implement data privacy policies, standards, and guidance.
- Identify, evaluate, and mitigate privacy risks across business functions.
- Lead and oversee DPIAs, TIAs, and high‑risk processing assessments.
- Advise on new initiatives, digital transformation programmes, and vendor engagements to ensure privacy by design and default.
- Ensure third-party vendors comply with the organisation’s data privacy requirements.
- Lead the response to personal data breaches, including assessment, containment, remediation, and notification obligations to regulators and data subjects.
- Ensure effective root cause analysis and drive systemic improvements.
- Serve as a trusted advisor to first line business areas and other functions, such as Legal, Information Security, HR, Marketing, and Product teams.
- Review contracts and data privacy clauses in conjunctions with Procurement and Legal teams.
- Provide expert advice on international data transfers and cross‑border processing.
- Develop and deliver privacy training, workshops, and awareness campaigns.
- Promote a privacy‑first culture across the organisation.
- Oversee processes related to data subject rights requests (DSRs), including access, rectification, and erasure requests.
- Ensure efficient handling of subject rights requests within statutory timelines.
- Coordinate compliance with applicable data privacy laws and guidance issued by regulators such as the Information Commissioner's Office.
- Manage responses to regulatory enquiries, investigations, and audits.