Data Protection Manager

Torus Group; Liverpool; Hybrid; AUD 124,000 - 162,000; Full time

Job summary

Torus Group is seeking a Data Protection Manager to own data protection compliance across the organisation. You will guide governance, controls and a privacy‑minded culture, and oversee the Data Protection Co‑Ordinator and Apprentice.

You will lead delivery of data protection services, work with the outsourced DPO, manage DPIAs/LIAs and ensure robust data protection across all offices. An agile, hybrid work pattern is expected, with regular attendance at the Liverpool office on Tuesdays.

Qualifications

• Higher education qualification or equivalent training and experience.
• Professional Data Protection qualifications at Foundation/Practitioner level or equivalent.
• Significant experience in data protection, GDPR and regulatory compliance in a complex organisation.
• Proven track record delivering operational services with measurable business benefits.
• Experience influencing stakeholders to achieve compliant, practical outcomes.

Responsibilities

• Provide expert data protection advice to managers and stakeholders across the Group.
• Lead operational delivery of data protection services ensuring regulatory compliance.
• Collaborate with the outsourced Data Protection Officer and Group Head of Improvement, Performance & Risk.
• Maintain Records of Processing Activities, policies, procedures and registers.
• Oversee data protection controls and data quality across the Group.
• Lead investigations into breaches and implement remedial actions.
• Support DSAs and LIAs with appropriate controls and mitigations.
• Develop relationships with stakeholders and provide training on data protection.
• Promote privacy by design and a culture of data protection compliance.
• Support risk management and assurance frameworks; manage risk.

Skills

Data protection

GDPR

Stakeholder management

Leadership

Policy development

Education

Higher education qualification

Job description

We're looking for a Data Protection Manager to join our Business Assurance team. This is an exciting opportunity for an experienced data protection professional to take ownership of data protection compliance across the Group, ensuring robust governance, effective controls and a privacy-focused culture that supports the organisation's strategic ambitions.

As Data Protection Manager, you will lead the operational delivery of data protection services across Torus, providing expert advice and guidance to managers and stakeholders at all levels. You'll oversee compliance with data protection legislation, support privacy-by-design initiatives, manage subject access requests and data protection controls, and work closely with our outsourced Data Protection Officer. Working collaboratively across the business, you'll play a key role in promoting good data protection practices, mitigating risk and ensuring compliance remains practical, effective and aligned with organisational objectives. You'll also provide leadership and support to the Data Protection Co-Ordinator and Data Protection Apprentice, helping to shape and develop this important service area.

Working Pattern:

This is an agile working role, with an expectation to attend The Observatory office in Liverpool city centre every Tuesday, as well as a minimum of two additional days per week in the office. The successful candidate must be able to work across all Torus Group offices as required to meet business needs. Flexibility will be required to support the demands of the role and the wider business.

What you'll be doing:

• - Provide expert data protection advice and support to managers and stakeholders across the Group.
• - Lead and manage the operational delivery of data protection services, ensuring compliance with relevant legislation and regulatory requirements.
• - Work closely with the outsourced Data Protection Officer and Group Head of Improvement, Performance & Risk to support the strategic direction of data protection across Torus.
• - Oversee and maintain key data protection processes, including Records of Processing Activities, policies, procedures and registers.
• - Ensure robust data protection and data quality controls are in place and operating effectively across the Group.
• - Lead investigations into data protection breaches and near misses, identifying root causes and implementing remedial actions where required.
• - Oversee and support Subject Access Requests, ensuring they are managed in accordance with statutory requirements and organisational policies.
• - Carry out and support Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs), providing advice on appropriate controls and mitigation measures.
• - Develop strong working relationships with stakeholders, providing practical, solution-focused advice and training on data protection matters.
• - Promote a culture of privacy by design and data protection compliance throughout the organisation.
• - Support the delivery of risk management, assurance and compliance frameworks, ensuring risks are appropriately identified and managed.
• - Lead, develop and support the Data Protection Co-Ordinator and Data Protection Apprentice.
• - Drive continuous improvement and value for money through the review and streamlining of data protection processes and systems.

What we're looking for:

• - Higher education qualification or equivalent training and experience.
• - Professional Data Protection qualifications, including Foundation and Practitioner level, or equivalent.
• - Significant experience working within data protection, GDPR and regulatory compliance in a complex organisation.
• - A proven track record of delivering operational services that provide measurable business benefits.
• - Experience supporting and influencing stakeholders to achieve compliant and practical business outcomes.
• - Knowledge and experience of data protection legislation, governance and risk management frameworks.
• - Experience implementing process improvements and driving efficiencies while maintaining compliance.
• - Strong leadership skills with experience managing, motivating and developing team members.
• - Excellent communication and relationship-building skills, with the ability to engage effectively with colleagues, customers, board members and external partners.
• - Strong project management and change management capabilities, with the ability to adapt to changing priorities.
• - High levels of IT literacy and the ability to embrace new systems, technologies and ways of working.
• - A proactive, resilient and self-motivated approach, with a commitment to continuous improvement and the Torus values of We Own, We Care and We Deliver.

Shortlisted candidates will be invited to attend an in-person interview at our Liverpool City Centre Office.

Additional Information:

• - Right to work verification.
• - Qualification certificate check (where applicable).
• - Two satisfactory references.
• - DBS check if applicable (Standard/Enhanced).
• - Completion of all new starter documentation, including signed terms and conditions.

Please note, we reserve the right to close this advert early if we receive a sufficient number of applications.