Data Privacy and Compliance Manager

Pinnacle Group; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Pension scheme

Annual leave

Learning & development

Job summary

Pinnacle Group is seeking an experienced Data Privacy & Compliance Manager to lead our privacy, information governance and compliance framework within the Commercial & Legal team. You will ensure UK GDPR compliance, act as the subject matter expert, and embed a culture of accountability across the organisation.

The role is hybrid with travel to corporate, client and operational locations as required. The ideal candidate will translate complex regulatory requirements into practical policies and

Qualifications

• Degree educated with strong knowledge of data privacy and governance.
• Experience in data protection regimes and regulatory guidance is essential.
• Proven ability to translate complex regulatory requirements into practical policy.

Responsibilities

• Lead the data protection and privacy programme across the Group.
• Maintain Records of Processing Activities (ROPAs) and DPIAs.
• Manage data subject rights and responses (SARs, erasure, portability).
• Oversee privacy notices and transparency requirements with stakeholders.
• Negotiate data processing and data sharing provisions in contracts.
• Conduct due diligence on third-party suppliers and monitor subcontractors.

Skills

Data privacy

Governance

Compliance

UK GDPR

Education

Bachelor's degree

Job description

The following content displays a map of the jobs location - Holborn, London

Pinnacle Group is looking for an experienced Data Privacy & Compliance Manager to join our Commercial & Legal team, reporting directly to the Group General Counsel. This is a key role within a diverse and growing organisation, responsible for developing, implementing and maintaining the Group’s privacy, information governance and compliance framework, ensuring compliance with UK GDPR, the Data Protection Act 2018, RSH regulation and contractual obligations across customers, clients and the supply chain. Acting as the Group’s subject matter expert on data privacy and compliance, the successful candidate will help embed a strong culture of accountability, effective governance and regulatory compliance across the organisation.

Our Commercial & Legal Team supports the business with expert advice on contracts, compliance and risk. They play a key role in shaping partnerships, protecting our interests and enabling sustainable growth aligned with our mission to Transform Communities and Change Lives.

The ideal candidate will be an experienced data privacy and compliance professional working across data protection, governance and regulatory compliance. You’ll have strong knowledge of UK GDPR and the Data Protection Act 2018, with the confidence to provide practical advice, influence stakeholders at all levels and translate complex regulatory requirements into clear, workable solutions. Commercially minded and comfortable working across a varied organisation, you’ll be an effective communicator and negotiator with strong written skills, sound judgement and the ability to manage competing priorities.

This is a hybrid role with travel to corporate, client and operational locations as required.

Who we are

Pinnacle Group is a market-leading national provider of housing, neighbourhood and workplace services. With over thirty years of experience, we deliver expert, place-based management and maintenance solutions that enhance the everyday lives of the communities we serve.

We’re a people-first organisation with a values-driven culture that has stood the test of time -reflected in the way we care for both our employees and our customers.

Who we’re looking for

We’re looking for someone who not only meets the key criteria below but also embraces our core values – Trust, Respect, Involve, Challenge, and Deliver Excellence – and is committed to earning and maintaining the confidence of our clients and communities.

Key responsibilities Include

• Lead the organisation’s data protection and privacy programme, developing and maintaining appropriate policies, procedures and standards.
• Ensure compliance with UK GDPR, the Data Protection Act 2018 and ICO guidance, while monitoring changes in privacy legislation and emerging regulatory requirements.
• Provide practical advice to operational teams on the lawful processing of personal data, including data sharing and appropriate handling of special category and vulnerable resident data.
• Maintain Records of Processing Activities (ROPAs) and review and approve Data Protection Impact Assessments (DPIAs).
• Manage data subject rights requests, including Subject Access Requests (SARs), Right to Erasure, Data Portability, Restriction and Objection requests.
• Oversee privacy notices and transparency requirements, ensuring information provided about the use of personal data remains appropriate and compliant.
• Review privacy and data protection provisions within customer and supplier contracts, negotiating data processing and data sharing agreements where required.
• Conduct privacy due diligence on third‑party suppliers and monitor the compliance of subcontractors and supply chain partners.
• Support wider Group compliance across housing sector requirements, Consumer Standards, procurement, ESG reporting, the Modern Slavery Act, and anti‑bribery and corruption requirements.
• Coordinate compliance audits and assurance activities, monitoring and following through on corrective actions arising from audits and reviews.
• Prepare clear management reports and compliance dashboards to provide oversight of privacy, regulatory and compliance matters.
• Lead investigations into data protection incidents and breaches, assessing severity, reporting requirements and whether notification to the ICO is required.
• Manage ICO notifications and communications with affected clients and stakeholders, ensuring incidents are handled appropriately.
• Conduct root cause analysis following incidents, implement corrective actions and maintain accurate breach and incident registers.
• Design and deliver privacy and compliance training, providing tailored guidance, building awareness across operational and support functions, and promoting a culture of accountability and continuous improvement.

Key Requirements

• Degree educated, ideally in Law, Business Management, IT or a related discipline.
• A minimum of 5 years demonstrable experience in data privacy, governance and compliance, with strong knowledge and understanding of data protection legislation, regulatory guidance and wider compliance requirements.
• A highly accurate, right-first-time approach, ensuring high-quality work is completed accurately and on time.
• Excellent written communication skills, with the ability to produce policies, Board reports and other professional documentation.
• Excellent communication skills, with the confidence to work effectively with stakeholders at all levels across the Group and with third parties.
• Strong influencing, negotiation and persuasion skills, with a results-driven approach.

Our Offer

We believe that diversity makes us stronger. The more varied our workforce, the better we canunderstand, reflect and meet the needs of the communities we serve. That’s why we actively welcome applications from people of all backgrounds – especially those who represent the communities we work with every day.

As a colleague, you’ll be part of aninclusiveandsupportiveculture where you’re encouraged to thrive.We’re committed to helping you reach your full potential through continuous learning, development opportunities and career progression.

In addition to statutory benefits such as sick pay, maternity/paternity leave, a pension scheme, and annual leave, we offer a wide range of additional benefits tailored to your role and business area, including: