Data & Privacy Manager

Fieldfisher; Belfast City District; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Private medical insurance

Health cash plan

Dental insurance

Life assurance

Critical illness insurance

Pension matched 7%

Holiday trading

Hybrid work policy

Job summary

Fieldfisher is seeking a Privacy Manager to provide maternity cover for ~12 months, focusing on day-to-day management and improvement of the firm’s Privacy Information Management System (PIMS).

The role involves maintaining ISO 27701 certification, governance, audits, and privacy operations in collaboration with DPO, IT, Risk & Compliance, HR and business teams.

Qualifications

• Experience managing or supporting ISO 27701/ISO 27001 governance frameworks.
• Experience maintaining management systems, policies and audit evidence.
• Experience coordinating audits and certification activities.
• Experience working in privacy, information governance, compliance, risk or information security functions.
• Familiarity with privacy management tools and records management.

Responsibilities

• Maintain and enhance the PIMS aligned with ISO 27701.
• Coordinate internal audits and certification activities.
• Track privacy risks and remediation actions.
• Manage records of processing activities and data inventories.
• Deliver privacy training and awareness.
• Collaborate with IT, HR and business teams.

Skills

Privacy governance

ISO 27701

Policy development

Audits & assurance

Stakeholder management

Data protection

Tools

Governance platforms

Audit software

Documentation tools

Job description

What can you expect?

We are seeking a Privacy Manager to provide maternity cover for approximately 12 months. This role is primarily operational and will be responsible for the day-to-day management, maintenance and continual improvement of the firm's Privacy Information Management System (PIMS).

The successful candidate will play a key role in maintaining the firm's ISO 27701 certification and supporting its wider information governance and data protection framework. Working closely with the Data Protection Officer, Information Security, Risk & Compliance, HR and business teams, the role will focus on embedding effective privacy controls, coordinating assurance activities, managing privacy operations and driving continuous improvement across the firm.

Key Responsibilities

Privacy Information Management System (PIMS)

• Maintain and enhance the firm's Privacy Information Management System (PIMS) in alignment with ISO 27701 requirements.
• Coordinate ongoing compliance with ISO 27701 and support integration with the firm's ISO 27001 Information Security Management System.
• Manage the review and update of privacy-related policies, procedures, standards and controls.
• Maintain privacy documentation, records and evidence required to support certification activities and internal assurance processes.
• Monitor completion of privacy-related actions and improvement plans arising from audits, assessments and reviews.

ISO 27701 Governance and Assurance

• Coordinate internal audits, management reviews and certification activities relating to ISO 27701.
• Support the preparation for external audits and certification assessments.
• Track privacy risks, issues and corrective actions, reporting progress to relevant governance forums.
• Produce management information, metrics and reporting on privacy and PIMS performance.
• Identify opportunities to improve operational effectiveness and maturity of the firm's privacy programme.

Privacy Operations

• Manage and maintain records of processing activities and data inventories.
• Support privacy assessments for new projects, technologies and business initiatives.
• Coordinate privacy review processes and ensure agreed actions are implemented and tracked through to completion.
• Maintain privacy management tools, workflows and registers, ensuring data remains accurate and up to date.
• Support operational implementation of privacy-by-design principles across the firm.

Incident and Risk Management

• Support the management of personal data incidents and breaches.
• Ensure incidents are appropriately recorded, investigated, monitored and escalated where required.
• Assist with root cause analysis and tracking of remediation activities to completion.
• Maintain privacy risk registers and support periodic risk reviews.

Training and Awareness

• Coordinate privacy awareness campaigns and communications.
• Deliver practical privacy training and guidance to business teams.
• Support development of learning materials, guidance documents and operational procedures.

Stakeholder Management

• Work closely with Information Security, Risk & Compliance, IT, HR and business teams to ensure privacy controls remain effective.
• Act as a key operational contact for privacy-related queries and support requests.
• Escalate significant issues and emerging risks to the Data Protection Officer as appropriate.

Experience and Knowledge

Experience

• Experience managing or supporting ISO 27701, ISO 27001 or similar governance frameworks.
• Experience maintaining management systems, policies, controls and audit evidence.
• Experience coordinating audits, assurance reviews or certification activities.
• Experience working within privacy, information governance, compliance, risk, information security or operational governance functions.
• Experience using governance, risk, compliance or privacy management platforms desirable.

Knowledge

• Good understanding of privacy and data protection principles.
• Familiarity with ISO 27701, ISO 27001 and privacy governance best practice.
• Understanding of operational risk management, control frameworks and continuous improvement methodologies.
• Knowledge of privacy management tools, records management and governance processes.

Skills

• Strong organisational and project coordination skills.
• Excellent stakeholder management and communication skills.
• Ability to manage multiple workstreams and competing priorities.
• Strong attention to detail and evidence management capability.
• Analytical approach to problem-solving and process improvement.
• Ability to translate policy and governance requirements into practical operational processes.

Who are we looking for?

• We don't have a type. We believe our differences are our strength; varied cultures, approaches and experience can only benefit us.

What do we offer?

• You can be yourself: It takes everyone to make us who we are. We’re a culture of diverse perspectives, with each of us making unique contributions that make us better together.
• In the office or WFH?: We think the best balance is more time in the office than at home, so we operate a 60:40 rule.
• Beyond salary: We offer plenty of benefits; private medical insurance, health cash plan, dental insurance, life assurance, critical illness insurance, matched pension contributions up to 7%, holiday trading, plus many more. Visit: Reward & Benefits ¦ Fieldfisher.
• Modern Office Space: Located at Adelaide Exchange, Belfast City Centre, with excellent commuter links and parking nearby.
• Nurturing your talent: Take a 'build a career' approach to your training. You'll be on a pathway but free to wander if you see something you'd like to study more closely.
• Funnel your interests: You have a life outside work, and we can help it to flourish. Join clubs, affinity networks, inclusive events, and pro bono/charity initiatives.

Inclusion is not exclusive:

If all our differences are highlighted, no one stands out for being different. At Fieldfisher, all our rich diversity is celebrated.

We will provide the equipment to allow you to shine, at interview and beyond. Just let us know what you need.

For accessibility information on our Belfast office, visit: Accessing Fieldfisher Belfast Hub ¦ Fieldfisher