About this role
Job Overview
This role plays a critical execution role within the team, delivering high-quality data protection documentation & assessments with sound judgement and minimal supervision. This role is responsible for translating regulatory and policy requirements into clear, defensible, and practical outcomes across a steady volume of work; supports complex privacy cases, contributes to service consistency, and helps uplift overall quality through example and collaboration.
Key Responsibilities
• Support business in performing end-to-end RoPA documentation and data protection assessments (DPIA, LIA, SPA, TIA) in line with regulatory requirements, internal standards, and service expectations • Assess data protection risks and recommend proportionate and pragmatic mitigation measures • Translate regulatory, legal, and policy guidance into operationally usable assessments • Handle moderately complex or sensitive processing activities independently • Support higher-risk or ambiguous service requests escalated by junior colleagues • Escalate material risks or unresolved uncertainties appropriately • Contribute to continuous improvement of templates, guidance, and assessment practices
Key Capabilities/Experience
• Strong knowledge of core privacy principles and regulatory frameworks. • Solid experience with data protection assessments, vendor risk assessments, data breach assessment, and DSR handling. • Strong analytical thinking and attention to detail. • Effective communicator able to work with cross-functional teams • Confidence engaging stakeholders and clarifying privacy positions
Minimum Qualifications
• 5–7 years of hands-on data protection / privacy compliance experience • Background in technology, information security, risk management, or legal • Privacy training or certifications (CIPM, CIPP/E, CIPP/US, CIPT, CDPSE). • Experience with privacy tools (preferred)