Data Privacy and Compliance Manager

Pinnacle Group; Camden Town; Presencial; GBP 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Maternity packages

Flexible working

Life Assurance

Enhanced pension

Annual leave

Private medical insurance

Cycle to work

Employee assistance

Retail discounts

Childcare support

Season ticket loan

Sick pay

Personal development

Company bonus

Descripción de la vacante

Pinnacle Group is seeking an experienced Data Privacy & Compliance Manager to join the Commercial & Legal team, reporting directly to the Group General Counsel. You will lead the privacy, information governance and regulatory compliance framework across the organisation, ensuring compliance with UK GDPR, the Data Protection Act 2018, and ICO guidance.

The role involves advising operational teams, conducting DPIA and ROPA processes, managing data subject rights, delivering training, audits and

Formación

• 5+ years demonstrable experience in data privacy, governance and compliance.
• Strong knowledge of UK GDPR and the Data Protection Act 2018.
• Ability to translate regulatory requirements into clear, workable solutions.
• Excellent written and verbal communication, with strong stakeholder engagement.

Responsabilidades

• Lead the organisation's data protection and privacy programme, developing and maintaining policies, procedures and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance, monitoring legislative changes.
• Provide practical advice to operational teams on lawful processing of personal data including data sharing.
• Maintain Records of Processing Activities (ROPAs) and approve DPIAs.
• Manage data subject rights requests including SARs, erasure, portability, restrictions and objections.

Conocimientos

Data privacy

Governance & compliance

Stakeholder management

Regulatory guidance

Communication skills

Negotiation

Educación

Degree in Law/Business/IT or related

Descripción del empleo

• Lead the organisation's data protection and privacy programme, developing and maintaining appropriate policies, procedures and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance, while monitoring changes in privacy legislation and emerging regulatory requirements.
• Provide practical advice to operational teams on the lawful processing of personal data, including data sharing and appropriate handling of special category and vulnerable resident data.
• Maintain Records of Processing Activities (ROPAs) and review and approve Data Protection Impact Assessments (DPIAs).
• Manage data subject rights requests, including Subject Access Requests (SARs), Right to Erasure, Data Portability, Restriction and Objection requests.
• Oversee privacy notices and transparency requirements, ensuring information provided about the use of personal data remains appropriate and compliant.
• Review privacy and data protection provisions within customer and supplier contracts, negotiating data processing and data sharing agreements where required.
• Conduct privacy due diligence on third-party suppliers and monitor the compliance of subcontractors and supply chain partners.
• Support wider Group compliance across housing sector requirements, Consumer Standards, procurement, ESG reporting, the Modern Slavery Act, and anti-bribery and corruption requirements.
• Coordinate compliance audits and assurance activities, monitoring and following through on corrective actions arising from audits and reviews.
• Prepare clear management reports and compliance dashboards to provide oversight of privacy, regulatory and compliance matters.
• Lead investigations into data protection incidents and breaches, assessing severity, reporting requirements and whether notification to the ICO is required.
• Manage ICO notifications and communications with affected clients and stakeholders, ensuring incidents are handled appropriately.
• Conduct root cause analysis following incidents, implement corrective actions and maintain accurate breach and incident registers.
• Design and deliver privacy and compliance training, providing tailored guidance, building awareness across operational and support functions, and promoting a culture of accountability and continuous improvement.

  The ideal candidate will be an experienced data privacy and compliance professional working across data protection, governance and regulatory compliance. You'll have strong knowledge of UK GDPR and the Data Protection Act 2018, with the confidence to provide practical advice, influence stakeholders at all levels and translate complex regulatory requirements into clear, workable solutions. Commercially minded and comfortable working across a varied organisation, you'll be an effective communicator and negotiator with strong written skills, sound judgement and the ability to manage competing priorities., Degree educated, ideally in Law, Business Management, IT or a related discipline.

• A minimum of 5 years demonstrable experience in data privacy, governance and compliance, with strong knowledge and understanding of data protection legislation, regulatory guidance and wider compliance requirements.
• A highly accurate, right-first-time approach, ensuring high-quality work is completed accurately and on time.
• Excellent written communication skills, with the ability to produce policies, Board reports and other professional documentation.
• Excellent communication skills, with the confidence to work effectively with stakeholders at all levels across the Group and with third parties.
• Strong influencing, negotiation and persuasion skills, with a results-driven approach.

  Pinnacle Group is looking for an experienced Data Privacy & Compliance Manager to join our Commercial & Legal team, reporting directly to the Group General Counsel. This is a key role within a diverse and growing organisation, responsible for developing, implementing and maintaining the Group's privacy, information governance and compliance framework, ensuring compliance with UK GDPR, the Data Protection Act 2018, RSH regulation and contractual obligations across customers, clients and the supply chain. Acting as the Group's subject matter expert on data privacy and compliance, the successful candidate will help embed a strong culture of accountability, effective governance and regulatory compliance across the organisation.

• Our Commercial & Legal Team supports the business with expert advice on contracts, compliance and risk. They play a key role in shaping partnerships, protecting our interests and enabling sustainable growth aligned with our mission to Transform Communities and Change Lives., Pinnacle Group is a market-leading national provider of housing, neighbourhood and workplace services. With over thirty years of experience, we deliver expert, place-based management and maintenance solutions that enhance the everyday lives of the communities we serve.
• In addition to statutory benefits such as sick pay, maternity/paternity leave, a pension scheme, and annual leave, we offer a wide range of additional benefits tailored to your role and business area, including:
• Maternity/paternity packages
• Flexible Working Arrangements
• Life Assurance
• Enhanced Pension Scheme
• Additional Annual Leave
• Private Medical Insurance
• Cycle to Work Scheme
• Employee Assistance Programme
• Retail Discounts
• Childcare Assistance
• Season Ticket Loans
• Sick Pay Schemes
• Personal Development Plans
• Company Bonus