Data Privacy and Compliance Manager

Frasers Group; Lancashire; Hybrid; GBP 60,000; Full time

Job summary

A forward-thinking technology business is seeking an experienced Senior Data Privacy and Compliance Manager. This pivotal role will oversee data privacy and regulatory compliance activities, providing essential support to senior management. Responsibilities include leading compliance with GDPR, managing privacy risks, and developing privacy policies while mentoring junior staff. The ideal candidate will have proven experience in data protection and strong analytical skills, with familiarity in ISO 27001 and PCI DSS standards. This hybrid position offers an annual salary of £60,000 plus benefits.

Benefits

Benefits

Qualifications

• Proven experience in data protection and regulatory compliance.
• Hands-on experience supporting or acting as a DPO.
• Strong analytical skills focused on privacy risk mitigation.

Responsibilities

• Lead data protection risk management activities.
• Ensure compliance with GDPR and UK data protection law.
• Oversee privacy impact assessments and data breach management.
• Manage compliance monitoring and reporting.
• Represent the Risk & Compliance function in senior forums.

Skills

Data protection

GDPR compliance

Regulatory compliance

Analytical skills

Communication skills

Leadership

Mentoring

Tools

ISO 27001

PCI DSS

Job description

Senior Data Privacy and Compliance Manager

MERJE – Lancashire, England, United Kingdom (Hybrid)

£60,000 + Benefits

An exciting opportunity has arisen for an experienced Senior Data Privacy and Compliance Manager to join a forward‑thinking technology business. This senior role will lead data privacy and regulatory compliance activities, providing both strategic and operational support to the Head of Risk & Compliance and the Data Protection Officer (DPO). The successful candidate will act as a trusted privacy and compliance partner, advising on GDPR and data protection matters, managing regulatory risk, and embedding a culture of accountability and privacy by design across the organisation. You will drive continuous improvement in privacy frameworks, policies, and processes while ensuring strong governance, operational resilience, and regulatory excellence.

Key Responsibilities

• Lead the organisation's data protection and privacy risk management activities in line with Board‐approved policies.
• Ensure ongoing compliance with GDPR and UK data protection law, acting as Deputy to the DPO.
• Oversee privacy impact assessments, data breach management, and employee privacy training.
• Manage compliance monitoring, reporting, and remediation activities with a privacy focus.
• Represent the Risk & Compliance function in senior forums as Deputy to the Head of Risk & Compliance.
• Develop and maintain privacy and compliance policies, procedures, and controls, working with key stakeholders.
• Liaise with regulators, auditors, and internal teams to maintain transparency, accountability, and regulatory alignment.
• Mentor and develop junior compliance colleagues, fostering a culture of privacy awareness and continuous improvement.
• Support the organisation’s information security and certification programmes, including ISO 27001, PCI DSS, and other relevant standards.
• Lead business continuity planning with an emphasis on data protection and operational resilience.

Skills, Experience & Qualifications

• Proven experience in data protection, GDPR, and regulatory compliance.
• Hands‑on experience supporting or acting as a DPO.
• Strong analytical and problem‑solving skills with a focus on privacy risk mitigation.
• Confident communicator, able to translate complex privacy and compliance requirements for senior stakeholders.
• Experience leading privacy audits, monitoring, investigations, and remediation initiatives.
• Familiarity with ISO 27001, PCI DSS, and other information security and privacy frameworks.
• Leadership experience, with a track record of mentoring and representing compliance at Board or senior management forums.
• Resilient, professional, and collaborative approach to managing privacy, regulatory, and operational challenges.