The Data Privacy Manager reports to the Data Privacy Officer and leads first-line privacy assurance across projects, operations, clients, and the three lines of defence. This role owns the data governance and privacy control environment, ensuring compliance with applicable data protection laws and internal policies, refining strategy and procedures, and delivering privacy training to data stakeholders. Candidates with less experience will be considered for the Data Privacy Specialist title.
Key responsibilities
- Governance & policy : Review, update and maintain the data governance and management framework, policies, guidelines and assessment reports to meet regulatory and business requirements.
- Privacy programme & controls : Design, implement, monitor and continuously improve the privacy management programme and related controls, including control validation, sample testing, documentation of findings and remediation recommendations.
- Risk & impact assessments : Conduct privacy risk assessments and privacy impact assessments for projects, changes and third parties; define, track and validate mitigations.
- Data lifecycle & classification : Classify data per the data dictionary, validate retention justifications, and ensure retention, housekeeping and data-quality practices are enforced.
- Incidents, audits & regulatory response : Lead breach response activities and reporting, incorporate lessons learned into controls, coordinate privacy audits with auditors, and support regulatory inquiries or inspections and remediation.
- Stakeholder enablement & tooling : Engage stakeholders through meetings and materials, deliver and improve privacy training, and partner with development teams to specify requirements for data governance tooling (data lineage, MDM, quality).
Required qualifications and skills
- 5–8 years of hands-on, first-line experience in data privacy, data governance, or related compliance roles; less-experienced candidates considered for Data Privacy Specialist.
- Demonstrable experience designing, operating, maintaining, and optimising data governance frameworks and privacy controls.
- Practical knowledge of relevant data protection laws and regulations such as PDPO and GDPR.
- Proven ability to manage and influence multiple data stakeholders across business, operations, and technology.
- Excellent written and verbal communication and presentation skills in English.
- Project management experience is a plus.