Data Protection Manager

GRC & Data Protection Manager

Salary: £60,000–£70,000

Working Pattern: Hybrid – 2 days per week in the office

Visa Sponsorship: Not available

About the Role

We are looking for an experienced Data Protection Manager to join a growing organisation. This role will focus on developing and implementing data protection, governance, risk and compliance frameworks, ensuring regulatory requirements are embedded across the business.

Key Responsibilities

• Develop and maintain data protection and wider GRC frameworks.
• Ensure compliance with GDPR, the EU AI Act and other relevant regulations.
• Conduct DPIAs, risk assessments and AI impact assessments.
• Develop policies, procedures and internal compliance controls.
• Manage risk registers, data mapping and compliance documentation.
• Support third-party risk management and supplier assessments.
• Provide guidance and training to internal stakeholders.
• Monitor regulatory developments and support ongoing compliance activities.

Key Requirements

• Minimum 4 years’ experience in data protection.
• Strong knowledge of GDPR, the EU AI Act and relevant regulatory frameworks.
• Experience developing or implementing data protection and risk management frameworks.
• Strong stakeholder management and risk assessment skills.
• Understanding of ISO standards, SOC 2 or similar compliance frameworks.
• Relevant certifications such as CIPP/E, CIPM or AIGP are advantageous.
• Experience with privacy management or GRC tools is desirable.
• Strong communication, organisational and analytical skills.