Data Privacy Manager

Descripción del puesto

Hybrid (UK Only - Sponsorship is unavailable) Overview:Reporting to the Data Protection Officer, this role plays a critical part in enabling the responsible use of personal data while ensuring robust control of privacy risks. Operating at the intersection of business strategy, risk management, and regulatory compliance, the role requires strong risk triage capability, the ability to challenge and influence stakeholders, and a clear focus on accountability and demonstrable compliance.A key aspect of the role is delivering pragmatic, business-aligned solutions using structured governance frameworks and tools such as GRC Archer, ensuring that privacy risks are identified, prioritised, and managed effectively.Core ResponsibilitiesPrivacy Risk Triage & Advisory Rapidly assess, prioritise and triage complex privacy risks across business initiatives, ensuring proportionate and risk-based decision-making. Provide expert, pragmatic advice on compliance with the Data Protection Act 2018, UK GDPR, and associated legislation, balancing regulatory requirements with commercial and operational needs. Act as a trusted advisor to senior stakeholders, clearly articulating risk exposure, trade-offs, and viable solutions. Stakeholder Management & Challenge Confidently challenge business stakeholders where risk exposure is not adequately controlled, demonstrating strong pushback and negotiation skills. Influence decision-making at senior levels, ensuring privacy considerations are embedded early in business processes and change initiatives. Translate complex legal and technical issues into clear, actionable insights tailored to non-specialist audiences. Risk Assessment & Controls (Including GRC Archer) Lead Data Protection Impact Assessments (DPIAs) and privacy risk assessments, ensuring outputs are robust, consistent, and aligned to the risk appetite. Leverage GRC Archer (or equivalent systems) to manage risk registers, track remediation actions, and produce aud