Data Privacy Leader — Strategy, Governance and Incidents

Zopa; Greater London; Hybrid; GBP 70,000 - 88,000; Full time

Benefits offered by this job

Hybrid work in London

Job summary

Zopa is seeking a Data Privacy Manager to lead the privacy team within Operational Risk & Compliance. You will guide product, tech, legal and risk colleagues on privacy issues, shaping a robust governance framework and PCI DSS capability over time.

You’ll manage a Privacy Associate, drive DPIAs, retention, and third-party due diligence, and ensure rapid, compliant responses to data incidents and DSARs. This role is hybrid with London presence.

Qualifications

• Deep practical knowledge of UK GDPR, the Data Protection Act 2018 and wider UK privacy regulation.
• Apply privacy law proportionately in a commercial environment and give pragmatic, business-enabling advice.
• Design and implement governance frameworks covering DPIAs, privacy by design, retention, ROPA and third-party duediligence.
• Manage data breaches and privacy incidents end-to-end, including ICO notification where required.
• Handle data-subject rights requests with quality, timeliness and defensible decisions.
• Build credibility with business, technology, legal, risk and security stakeholders.

Responsibilities

• Advise product and business teams on privacy implications of new products, changes and customer journeys.
• Translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.
• Support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, ROPA and third-party diligence.
• Manage complex privacy incidents, including regulatory notification and engagement with affected individuals where required.
• Oversee high-quality, timely handling of DSARs, erasure requests and objections.
• Build trusted partnerships across technology, legal, risk, security and commercial functions.
• Develop your direct report and strengthen privacy awareness across the business.
• Contribute to the Bank’s approach to data risk across a broad range of business activity

Skills

UK GDPR

Data Protection Act 2018

Privacy by design

DPIAs

ROPA

Third-party due diligence

Data breaches management

Data subject rights handling

Team leadership

Tools

OneTrust

Job description

Zopa is seeking a Data Privacy Manager to lead the privacy team within Operational Risk & Compliance. You will guide product, tech, legal and risk colleagues on privacy issues, shaping a robust governance framework and PCI DSS capability over time.

You’ll manage a Privacy Associate, drive DPIAs, retention, and third-party due diligence, and ensure rapid, compliant responses to data incidents and DSARs. This role is hybrid with London presence.