Data Governance and Privacy Lead

Manchester Digital; Manchester; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A government digital service provider is looking for a Data Governance & Privacy Lead to lead a team and implement privacy controls across various digital products. The role requires experience in data protection best practices and a relevant privacy qualification. The successful candidate will oversee data protection training, deliver quality assessments, and work with external stakeholders. A hybrid working model is available, supporting a blend of office and home working in Manchester.

Benefits

Flexible hybrid working

Civil Service Pension

Annual leave increasing to 30 days

Extra day off for King’s birthday

Career progression support

Focus on wellbeing

Qualifications

• Experience in leading data protection teams in a technology-driven environment.
• Familiarity with complex operational and legal deadlines.
• Strong interpersonal skills for building effective relationships.

Responsibilities

• Lead the Data Governance team and implement data protection controls.
• Deliver high-quality Data Protection Impact Assessments and privacy notices.
• Provide training on data protection obligations for GDS staff.

Skills

Data protection best practices

Privacy by design

Strong communication skills

Team leadership

Understanding of emerging technologies

Risk management

Education

Relevant privacy qualification (e.g., IAPP, BCS)

Job description

Job Description

The Data Governance Team, as part of the GDS Product, Strategy, Planning and Performance directorate, provides specialist expertise and leadership across the Government Digital Service. GDS has specialist data protection requirements and needs extensive data governance controls to be designed and incorporated into product development. Strong privacy controls designed and built from the outset maintain users' confidence in the digital services delivered by GDS.

The Data Governance team has an excellent track record for their enabling and pragmatic attitudes to support delivery teams in achieving GDS’s strategic objectives at a fast pace whilst balancing robust data protection compliance. The post holder will lead on delivering data protection excellence across GDS in products such as the GOV.UK web platform, App, analytics and new and upcoming products such as GOV.UK Chat.

As a Data Governance & Privacy Lead, You Will

• Line manage and play an active role in the Data Governance leadership team.
• Lead your sub‑team to design and implement privacy and data protection controls for the products and processes GDS creates, including the delivery of Data Protection Impact Assessments to ensure the GDS Product Group complies with data protection law by delivering flexible and pragmatic governance practices that enable delivery at pace.
• Lead the delivery of high‑quality Data Protection Impact Assessments (DPIAs), Privacy Notices and Records of Processing Activities for new projects at pace.
• Oversee training to ensure GDS staff understand data protection obligations and best practices, fostering a culture of data privacy at all levels.
• Work closely with GDS colleagues to build trust.
• Deliver high‑quality written and verbal briefings to all levels, including delivery managers and senior management, and explain technical detail to non‑technical staff.
• Work closely with external stakeholders such as the Information Commissioner’s Office (ICO) and privacy groups to ensure compliance and address queries.
• Provide proactive support to the heads to manage and lead on compliance, identify risks, the development of data governance strategies and deliver strategic objectives.
• Prioritise your time and the time of your team effectively to manage a high volume, fast‑paced and frequently evolving workload.
• Manage workloads to ensure that priorities align with strategic and team objectives and that deadlines are met.
• Provide expert advice and direction on complex and novel forms of processing, especially on AI, and balance legal requirements against the need to deliver innovative solutions to benefit the public, supporting timely delivery of demanding GDS targets.

Person specification

We’re Interested In People Who Have

• Demonstrable experience in leading the implementation of data protection best practice and privacy by design in a complex, challenging, technology‑driven environment.
• A relevant privacy qualification such as IAPP (CIPP/E, CIPM) or BCS (ISEB), or have relevant experience.
• Demonstrable experience of leading data protection teams to enable the organisation to achieve its strategic objectives, underpinned by a positive, proactive leadership approach with a commitment to collaboration and governance.
• Experience at delivering at pace, meeting challenging and changing operational and legal deadlines.
• Strong communication, presentation and interpersonal skills to build effective working relationships in a flexible and fast‑changing environment.
• A good understanding of new and emerging technologies and the opportunities they provide to improve the delivery of public services in the UK, including AI.
• Experience of risk management and the ability to balance risks against operational, technical and commercial requirements.

Benefits

• Flexible hybrid working with flexi‑time and the option to work part‑time or condensed hours.
• a Civil Service Pension with an average employer contribution of 28.97%.
• 25 days of annual leave, increasing by a day each year up to a maximum of 30 days.
• an extra day off for the King’s birthday.
• an in‑year bonus scheme to recognise high performance.
• career progression and coaching, including a training budget for personal development.
• a focus on wellbeing with access to an employee assistance programme.
• job satisfaction from making government services easier to use and more inclusive for people across the UK.
• advances on pay, including for travel season tickets.
• death in service benefits.
• cycle to work scheme and facilities.
• access to an employee discounts scheme.
• 10 learning days per year.
• volunteering opportunities (5 special leave days per year).
• access to a suite of learning activities through Civil Service learning.
• access to children's holiday play schemes across different locations in central London.

Office attendance

The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non‑home based location for 40-60% of the time over the accounting period. DSIT does not normally offer full home working (i.e. working at home), but we do offer a variety of flexible working options (including occasionally working from home).

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.

Selection process details

• A simple application screening process - We only ask for a CV and cover letter of up to 1000 words. Important tip – please ensure that your cover letter includes how you meet the skills and experience listed in the “person specification” section above.
• A 60 minute video interview.

Recruitment Timeline

Sift completion: 20th February 2026. Panel interviews: W/C 2nd March 2026. Candidates that do not pass the interview but have demonstrated an acceptable standard may be considered for similar roles at a lower grade. A reserve list will be held for a period of 12 months, from which further appointments can be made.

Security clearance

Please note that this role requires SC clearance, which would normally need 5 years’ UK residency in the past 5 years. This is not an absolute requirement, but supplementary checks may be needed where individuals have not lived in the UK for that period. This may mean your security clearance (and therefore your appointment) will take longer or, in some cases, not be possible. For meaningful checks to be carried out, you will need to have lived in the UK for a sufficient period of time to enable appropriate checks to be carried out and produce a result which provides the required level of assurance. Whilst a lack UK residency in itself is not necessarily a bar to a security clearance, and expectation of UK residency may range from 3 to 5 years. Failure to meet the residency requirements needed for the role may result in the withdrawal of provisional job offers.

Sponsorship

DSIT cannot offer Visa sponsorship to candidates through this campaign. DSIT holds a Visa sponsorship licence but this can only be used for certain roles and this campaign does not qualify.