Data Privacy and Compliance Manager

Pinnacle Group; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Flexible Working Arrangements

Life Assurance

Private Medical Insurance

Cycle to Work Scheme

Employee Assistance Programme

Job summary

Pinnacle Group is seeking an experienced Data Privacy & Compliance Manager to join our Commercial & Legal team. The role reports to the Group General Counsel and focuses on developing, implementing and maintaining the Group’s privacy, information governance and compliance framework across customers, clients and supply chains.

You will embed a culture of accountability, provide pragmatic regulatory guidance, and work across a diverse organisation in a hybrid role with travel to corporate and

Qualifications

• 5+ years demonstrable experience in data privacy, governance and compliance.
• Degree educated in a relevant field as stated above.
• Excellent written and verbal communication with ability to influence stakeholders across levels.

Responsibilities

• Lead the organisation’s data protection and privacy programme, developing and maintaining policies and standards.
• Ensure compliance with UK GDPR and the Data Protection Act 2018, monitoring changes in privacy legislation.
• Provide practical advice on lawful processing of personal data and data sharing.
• Maintain Records of Processing Activities (ROPAs) and DPIAs.
• Manage data subject rights requests, including SARs and erasure/data portability requests.
• Oversee privacy notices and transparency requirements in line with regulatory guidance.
• Review data protection clauses in customer and supplier contracts; negotiate data processing agreements.
• Conduct privacy due diligence on third-party suppliers and monitor subcontractors.

Skills

Data privacy governance

UK GDPR

Stakeholder management

Policy development

Regulatory compliance

Education

Degree in Law, Business Management, IT or related discipline

Job description

Pinnacle Group is looking for an experienced Data Privacy & Compliance Manager to join our Commercial & Legal team, reporting directly to the Group General Counsel. This is a key role within a diverse and growing organisation, responsible for developing, implementing and maintaining the Group’s privacy, information governance and compliance framework, ensuring compliance with UK GDPR, the Data Protection Act 2018, RSH regulation and contractual obligations across customers, clients and the supply chain. Acting as the Group’s subject matter expert on data privacy and compliance, the successful candidate will help embed a strong culture of accountability, effective governance and regulatory compliance across the organisation. Our Commercial & Legal Team supports the business with expert advice on contracts, compliance and risk. They play a key role in shaping partnerships, protecting our interests and enabling sustainable growth aligned with our mission to Transform Communities and Change Lives. The ideal candidate will be an experienced data privacy and compliance professional working across data protection, governance and regulatory compliance. You’ll have strong knowledge of UK GDPR and the Data Protection Act 2018, with the confidence to provide practical advice, influence stakeholders at all levels and translate complex regulatory requirements into clear, workable solutions. Commercially minded and comfortable working across a varied organisation, you’ll be an effective communicator and negotiator with strong written skills, sound judgement and the ability to manage competing priorities. This is a hybrid role with travel to corporate, client and operational locations as required.

Who we are

Pinnacle Group is a market-leading national provider of housing, neighbourhood and workplace services. With over thirty years of experience, we deliver expert, place-based management and maintenance solutions that enhance the everyday lives of the communities we serve.

Who we’re looking for

We’re looking for someone who not only meets the key criteria below but also embraces our core values – Trust, Respect, Involve, Challenge, and Deliver Excellence – and is committed to earning and maintaining the confidence of our clients and communities.

Key responsibilities

• Lead the organisation’s data protection and privacy programme, developing and maintaining appropriate policies, procedures and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance, while monitoring changes in privacy legislation and emerging regulatory requirements.
• Provide practical advice to operational teams on the lawful processing of personal data, including data sharing and appropriate handling of special category and vulnerable resident data.
• Maintain Records of Processing Activities (ROPAs) and review and approve Data Protection Impact Assessments (DPIAs).
• Manage data subject rights requests, including Subject Access Requests (SARs), Right to Erasure, Data Portability, Restriction and Objection requests.
• Oversee privacy notices and transparency requirements, ensuring information provided about the use of personal data remains appropriate and compliant.
• Review privacy and data protection provisions within customer and supplier contracts, negotiating data processing and data sharing agreements where required.
• Conduct privacy due diligence on third-party suppliers and monitor the compliance of subcontractors and supply chain partners.
• Support wider Group compliance across housing sector requirements, Consumer Standards, procurement, ESG reporting, the Modern Slavery Act, and anti-bribery and corruption requirements.
• Coordinate compliance audits and assurance activities, monitoring and following through on corrective actions arising from audits and reviews.
• Prepare clear management reports and compliance dashboards to provide oversight of privacy, regulatory and compliance matters.
• Lead investigations into data protection incidents and breaches, assessing severity, reporting requirements and whether notification to the ICO is required.
• Manage ICO notifications and communications with affected clients and stakeholders, ensuring incidents are handled appropriately.
• Conduct root cause analysis following incidents, implement corrective actions and maintain accurate breach and incident registers.
• Design and deliver privacy and compliance training, providing tailored guidance, building awareness across operational and support functions, and promoting a culture of accountability and continuous improvement.

Key Requirements

• Degree educated, ideally in Law, Business Management, IT or a related discipline.
• A minimum of 5 years demonstrable experience in data privacy, governance and compliance, with strong knowledge and understanding of data protection legislation, regulatory guidance and wider compliance requirements.
• A highly accurate, right-first-time approach, ensuring high-quality work is completed accurately and on time.
• Excellent written communication skills, with the ability to produce policies, Board reports and other professional documentation.
• Excellent communication skills, with the confidence to work effectively with stakeholders at all levels across the Group and with third parties.
• Strong influencing, negotiation and persuasion skills, with a results-driven approach.

Our Offer

We believe that diversity makes us stronger. The more varied our workforce, the better we can understand, reflect and meet the needs of the communities we serve. That’s why we actively welcome applications from people of all backgrounds – especially those who represent the communities we work with every day.

As a colleague, you’ll be part of an inclusive and supportive culture where you’re encouraged to thrive. We’re committed to helping you reach your full potential through continuous learning, development opportunities and career progression.

In addition to statutory benefits such as sick pay, maternity/paternity leave, a pension scheme, and annual leave, we offer a wide range of additional benefits tailored to your role and business area, including:

• Maternity/paternity packages
• Flexible Working Arrangements
• Life Assurance
• Enhanced Pension Scheme
• Additional Annual Leave
• Private Medical Insurance
• Cycle to Work Scheme
• Employee Assistance Programme
• Retail Discounts
• Childcare Assistance
• Season Ticket Loans
• Sick Pay Schemes
• Personal Development Plans
• Company Bonus