Data Protection And Privacy Consultant

Addition; Greater London; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Hybrid working (2-3 days in office)

Job summary

Addition is seeking a senior data protection and privacy advisor in Central London with hybrid work options. You will be a trusted point of contact for clients and senior stakeholders, guiding GDPR compliance, privacy assessments, and governance across UK/EU regulations.

You’ll leverage OneTrust to enhance privacy programs and deliver practical risk-mitigation plans. You will develop data maps, DPIAs/PIAs, and ROPAs, advise on data subject requests, and provide AI governance insights.

Qualifications

• 5+ years delivering data protection and privacy solutions.
• Strong knowledge of UK and EU GDPR.
• Experience delivering privacy management programmes in organisations or consultancy.
• Proven OneTrust experience with certification preferred.
• IAPP or equivalent certification.
• Experience creating data maps, ROPAs and DPIAs.

Responsibilities

• Advise clients on UK/EU GDPR and other privacy regulations.
• Lead privacy assessments including DPIAs, PIAs and LIAs.
• Develop privacy programmes, governance, policies and notices.
• Deliver training on data protection and AI governance.
• Use OneTrust to optimise privacy processes for clients.
• Create data maps, asset registers and ROPAs.
• Assess privacy risks and supporting mitigation plans.
• Advise on data subject rights and access requests.
• Manage client projects and stakeholder relationships.

Skills

Privacy governance

UK & EU GDPR

OneTrust

Stakeholder management

DPIAs/PIAs

AI governance awareness

Education

Degree-level education

Tools

OneTrust

Job description

Role Overview

• Location: Central London/Hybrid (2-3 days per week in the office).
• Package: £60,000–£70,000 per annum, Annual Bonus & Enhanced Benefits

What You’ll Be Doing

• Act as a trusted data protection and privacy advisor, becoming a key point of contact for clients and senior stakeholders.
• Provide practical advice across UK GDPR, EU GDPR and other applicable international privacy regulations.
• Lead and support privacy assessments, including DPIAs, PIAs, Legitimate Interest Assessments, legal basis reviews and special category assessments.
• Help clients develop and maintain effective privacy programmes, governance frameworks, policies, contracts and privacy notices.
• Deliver engaging training and awareness sessions covering data protection, privacy and emerging areas such as AI governance.
• Use OneTrust to build, manage and improve privacy management processes, helping clients get maximum value from the platform.
• Develop and maintain data maps, asset registers and Records of Processing Activities (ROPAs).
• Assess privacy, data and cyber risks, helping clients establish clear mitigation plans and priorities.
• Review client compliance positions and turn findings into practical action plans, targets and prioritised improvements.
• Support the management and reporting of data breaches, including helping clients meet relevant ICO requirements.
• Advise on data subject rights and access requests, guiding client teams through appropriate responses.
• Support the creation of data retention schedules aligned with regulatory and business requirements.
• Assess third-party and supplier risks, helping ensure appropriate standards and controls are in place.
• Keep clients informed of significant developments in data protection legislation and regulatory guidance, including developments relating to AI.
• Manage multiple client projects and engagements, keeping delivery, communication and expectations on track.
• Build strong relationships with client teams, senior management and internal stakeholders, including at MD and C-suite level.
• Take a consultancy-led approach to understanding different business models and translating their processes into effective privacy solutions.
• Contribute to wider operational and risk management activities, identifying issues and ensuring appropriate controls are established.

Main Skills Needed

• Degree-level education with 5+ years’ experience delivering data protection and privacy solutions.
• Strong practical knowledge of UK and EU GDPR, with an understanding of other international data protection regulations.
• Proven experience delivering privacy management programmes within organisations or consultancy environments.
• Strong experience with OneTrust, ideally including relevant certification and hands‑on implementation experience.
• IAPP or equivalent professional certification.
• Solid understanding of information governance and broader privacy disciplines.
• Proven experience delivering DPIAs, PIAs, risk assessments and associated remediation activity.
• Experience creating and maintaining data maps, asset registers and ROPAs.
• Strong understanding of risk management frameworks and operational risk.
• Excellent project planning, workload management and stakeholder coordination skills.
• Confident communicating with senior stakeholders and presenting complex subjects in a clear, accessible way.
• Strong problem-solving and critical-thinking skills, with the ability to provide pragmatic advice rather than purely theoretical guidance.
• Excellent written and verbal communication skills.
• Strong client management skills, with a proven ability to understand business needs and deliver against expectations.
• Good understanding of AI technologies, including LLMs, Generative AI and Agentic AI, and their data protection implications.
• Willingness and ability to travel within the UK, Europe and internationally when required.
• Leadership, mentoring or coaching experience would be advantageous, particularly where influence is achieved without direct line management.
• Experience developing business cases, automating DPIAs or working within a private-sector environment would be beneficial.

What’s in It for You

• A senior consultancy role with genuine exposure to a varied client portfolio.
• The chance to work on complex privacy, governance, risk and AI-related challenges.
• Regular interaction with senior decision-makers and business leaders.
• The opportunity to shape and operationalise privacy programmes using OneTrust.
• A role where your expertise directly influences client strategy, compliance and business performance.
• Hybrid working, balanced with valuable face‑to‑face collaboration.
• Scope to broaden your consultancy, leadership and subject‑matter expertise across an evolving privacy landscape.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

By applying you are confirming you are happy to be added to the Addition Solutions mailing list regarding future suitable positions. You can opt out of this at any time simply by contacting one of our consultants.