Data Privacy and Compliance Manager

Pinnacle Group Limited; Camden Town; Hybrid; GBP 50,000 - 55,000; Full time

Benefits offered by this job

Maternity/paternity packages

Flexible Working Arrangements

Life Assurance

Enhanced Pension Scheme

Additional Annual Leave

Private Medical Insurance

Cycle to Work Scheme

Employee Assistance Programme

Retail Discounts

Childcare Assistance

Season Ticket Loans

Sick Pay Schemes

Personal Development Plans

Company Bonus

Job summary

Pinnacle Group Limited is seeking an experienced Data Privacy & Compliance Manager to lead the organisation’s privacy, information governance and compliance framework, reporting to the Group General Counsel.

The role will drive UK GDPR compliance, DPIAs and data subject rights, work with the Commercial & Legal team, and coordinate audits across the supply chain. It’s a hybrid role with travel to corporate and client locations as required.

Qualifications

• Experience in data privacy, governance and compliance.
• Strong knowledge of UK GDPR and Data Protection Act 2018.
• Ability to translate regulatory requirements into practical solutions.

Responsibilities

• Lead the organisation’s data protection and privacy programme, developing policies and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance.
• Provide practical advice to operational teams on lawful processing of personal data.
• Maintain Records of Processing Activities (ROPAs) and review DPIAs.
• Manage data subject rights including SARs and data erasure requests.
• Oversee privacy notices and transparency requirements for data use.
• Negotiate data processing agreements and review privacy provisions in contracts.
• Conduct privacy due diligence on third-party suppliers and monitor subcontractors.
• Coordinate wider Group compliance across housing sector requirements and ESG reporting.
• Prepare management reports and dashboards on privacy and compliance.
• Lead investigations into data protection incidents and liaise with ICO.
• Deliver privacy and compliance training to build a culture of accountability.

Skills

Data privacy

Governance

Compliance

Stakeholder comms

Education

Degree in Law / Business / IT

Job description

Pinnacle Group is looking for an experienced Data Privacy & Compliance Manager to join our Commercial & Legal team, reporting directly to the Group General Counsel. This is a key role within a diverse and growing organisation, responsible for developing, implementing and maintaining the Group’s privacy, information governance and compliance framework, ensuring compliance with UK GDPR, the Data Protection Act 2018, RSH regulation and contractual obligations across customers, clients and the supply chain. Acting as the Group’s subject matter expert on data privacy and compliance, the successful candidate will help embed a strong culture of accountability, effective governance and regulatory compliance across the organisation.

Our Commercial & Legal Team supports the business with expert advice on contracts, compliance and risk. They play a key role in shaping partnerships, protecting our interests and enabling sustainable growth aligned with our mission to Transform Communities and Change Lives.

The ideal candidate will be an experienced data privacy and compliance professional working across data protection, governance and regulatory compliance. You’ll have strong knowledge of UK GDPR and the Data Protection Act 2018, with the confidence to provide practical advice, influence stakeholders at all levels and translate complex regulatory requirements into clear, workable solutions. Commercially minded and comfortable working across a varied organisation, you’ll be an effective communicator and negotiator with strong written skills, sound judgement and the ability to manage competing priorities.

This is a hybrid role with travel to corporate, client and operational locations as required.

Who we are

Pinnacle Group is a market-leading national provider of housing, neighbourhood and workplace services. With over thirty years of experience, we deliver expert, place-based management and maintenance solutions that enhance the everyday lives of the communities we serve.

We’re a people-first organisation with a values-driven culture that has stood the test of time -reflected in the way we care for both our employees and our customers.

Who we’re looking for

We’re looking for someone who not only meets the key criteria below but also embraces our core values – Trust, Respect, Involve, Challenge, and Deliver Excellence – and is committed to earning and maintaining the confidence of our clients and communities.

Key responsibilities Include

• Lead the organisation’s data protection and privacy programme, developing and maintaining appropriate policies, procedures and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance, while monitoring changes in privacy legislation and emerging regulatory requirements.
• Provide practical advice to operational teams on the lawful processing of personal data, including data sharing and appropriate handling of special category and vulnerable resident data.
• Maintain Records of Processing Activities (ROPAs) and review and approve Data Protection Impact Assessments (DPIAs).
• Manage data subject rights requests, including Subject Access Requests (SARs), Right to Erasure, Data Portability, Restriction and Objection requests.
• Oversee privacy notices and transparency requirements, ensuring information provided about the use of personal data remains appropriate and compliant.
• Review privacy and data protection provisions within customer and supplier contracts, negotiating data processing and data sharing agreements where required.
• Conduct privacy due diligence on third-party suppliers and monitor the compliance of subcontractors and supply chain partners.
• Support wider Group compliance across housing sector requirements, Consumer Standards, procurement, ESG reporting, the Modern Slavery Act, and anti-bribery and corruption requirements.
• Coordinate compliance audits and assurance activities, monitoring and following through on corrective actions arising from audits and reviews.
• Prepare clear management reports and compliance dashboards to provide oversight of privacy, regulatory and compliance matters.
• Lead investigations into data protection incidents and breaches, assessing severity, reporting requirements and whether notification to the ICO is required.
• Manage ICO notifications and communications with affected clients and stakeholders, ensuring incidents are handled appropriately.
• Conduct root cause analysis following incidents, implement corrective actions and maintain accurate breach and incident registers.
• Design and deliver privacy and compliance training, providing tailored guidance, building awareness across operational and support functions, and promoting a culture of accountability and continuous improvement.

Key Requirements

• Degree educated, ideally in Law, Business Management, IT or a related discipline.
• A minimum of 5 years demonstrable experience in data privacy, governance and compliance, with strong knowledge and understanding of data protection legislation, regulatory guidance and wider compliance requirements.
• A highly accurate, right-first-time approach, ensuring high-quality work is completed accurately and on time.
• Excellent written communication skills, with the ability to produce policies, Board reports and other professional documentation.
• Excellent communication skills, with the confidence to work effectively with stakeholders at all levels across the Group and with third parties.
• Strong influencing, negotiation and persuasion skills, with a results-driven approach.

Our Offer

We believe that diversity makes us stronger. The more varied our workforce, the better we canunderstand, reflect and meet the needs of the communities we serve. That’s why we actively welcome applications from people of all backgrounds – especially those who represent the communities we work with every day.

As a colleague, you’ll be part of aninclusiveandsupportiveculture where you’re encouraged to thrive.We’re committed to helping you reach your full potential through continuous learning, development opportunities and career progression.

In addition to statutory benefits such as sick pay, maternity/paternity leave, a pension scheme, and annual leave, we offer a wide range of additional benefits tailored to your role and business area, including:

• Maternity/paternity packages
• Flexible Working Arrangements
• Life Assurance
• Enhanced Pension Scheme
• Additional Annual Leave
• Private Medical Insurance
• Cycle to Work Scheme
• Employee Assistance Programme
• Retail Discounts
• Childcare Assistance
• Season Ticket Loans
• Sick Pay Schemes
• Personal Development Plans
• Company Bonus

Proud member of the Disability Confident employer scheme

Data Privacy and Compliance Manager

Company: Pinnacle Group Limited Salary: £50,000 to £55,000 a year Hours: Full-time Location: Holborn, London, WC1V 6PL Job type: Permanent Posting date: 5 Nov 2026 Closing date: 4 Dec 2026