Data Protection and Privacy Consultant

Addition; Slough; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Annual Bonus

Enhanced Benefits

Job summary

Addition, a specialist consultancy in data protection and privacy, seeks a Data Protection and Privacy Consultant to help clients comply with UK/EU GDPR and other privacy rules.

Hybrid role in Central London, with 2-3 days in the office. You will lead DPIAs, PIAs, and privacy programmes, deliver training, and leverage OneTrust to optimise client privacy postures across multiple engagements.

Qualifications

• 5+ years' experience delivering data protection and privacy solutions.
• Strong knowledge of UK and EU GDPR.
• Experience delivering privacy management programmes.
• IAPP or equivalent certification.
• Ability to translate complex privacy into practical business solutions.
• Willingness to travel within UK, Europe and internationally.

Responsibilities

• Act as a trusted data protection and privacy advisor for clients and senior stakeholders.
• Provide practical guidance across UK GDPR, EU GDPR and international regulations.
• Lead privacy assessments including DPIAs and PIAs.
• Help clients develop privacy programmes, policies and notices.
• Deliver training on data protection, privacy and AI governance.
• Use OneTrust to manage privacy processes and improvements.
• Develop data maps, asset registers and ROPAs.
• Assess risks and define mitigation plans and priorities.
• Review client compliance and turn findings into action plans.

Skills

5+ years experience

UK & EU GDPR

Privacy governance

Stakeholder communication

Risk management

Leadership / mentoring

AI governance awareness

Data protection principles

Education

Degree-level education

Tools

OneTrust

Job description

Data Protection and Privacy Consultant

This is a chance to join a specialist consultancy supporting organisations with their data protection, privacy, risk and governance needs. You'll play a key role in helping clients turn complex regulatory requirements into practical, business-focused solutions.

Role Overview

• Location: Central London/Hybrid (2-3 days per week in the office).
• Package: £60,000–£70,000 per annum, Annual Bonus & Enhanced Benefits
• Industry: Data Protection, Privacy & Consultancy

What You'll Be Doing

• Act as a trusted data protection and privacy advisor, becoming a key point of contact for clients and senior stakeholders.
• Provide practical advice across UK GDPR, EU GDPR and other applicable international privacy regulations.
• Lead and support privacy assessments, including DPIAs, PIAs, Legitimate Interest Assessments, legal basis reviews and special category assessments.
• Help clients develop and maintain effective privacy programmes, governance frameworks, policies, contracts and privacy notices.
• Deliver engaging training and awareness sessions covering data protection, privacy and emerging areas such as AI governance.
• Use OneTrust to build, manage and improve privacy management processes, helping clients get maximum value from the platform.
• Develop and maintain data maps, asset registers and Records of Processing Activities (ROPAs).
• Assess privacy, data and cyber risks, helping clients establish clear mitigation plans and priorities.
• Review client compliance positions and turn findings into practical action plans, targets and prioritised improvements.
• Support the management and reporting of data breaches, including helping clients meet relevant ICO requirements.
• Advise on data subject rights and access requests, guiding client teams through appropriate responses.
• Support the creation of data retention schedules aligned with regulatory and business requirements.
• Assess third‑party and supplier risks, helping ensure appropriate standards and controls are in place.
• Keep clients informed of significant developments in data protection legislation and regulatory guidance, including developments relating to AI.
• Manage multiple client projects and engagements, keeping delivery, communication and expectations on track.
• Build strong relationships with client teams, senior management and internal stakeholders, including at MD and C‑suite level.
• Take a consultancy‑led approach to understanding different business models and translating their processes into effective privacy solutions.
• Contribute to wider operational and risk management activities, identifying issues and ensuring appropriate controls are established.

Main Skills Needed

• Degree-level education with 5+ years' experience delivering data protection and privacy solutions.
• Strong practical knowledge of UK and EU GDPR, with an understanding of other international data protection regulations.
• Proven experience delivering privacy management programmes within organisations or consultancy environments.
• Strong experience with OneTrust, ideally including relevant certification and hands‑on implementation experience.
• IAPP or equivalent professional certification.
• Solid understanding of information governance and broader privacy disciplines.
• Proven experience delivering DPIAs, PIAs, risk assessments and associated remediation activity.
• Experience creating and maintaining data maps, asset registers and ROPAs.
• Strong understanding of risk management frameworks and operational risk.
• Excellent project planning, workload management and stakeholder coordination skills.
• Confident communicating with senior stakeholders and presenting complex subjects in a clear, accessible way.
• Strong problem‑solving and critical‑thinking skills, with the ability to provide pragmatic advice rather than purely theoretical guidance.
• Excellent written and verbal communication skills.
• Strong client management skills, with a proven ability to understand business needs and deliver against expectations.
• Good understanding of AI technologies, including LLMs, Generative AI and Agentic AI, and their data protection implications.
• Willingness and ability to travel within the UK, Europe and internationally when required.
• Leadership, mentoring or coaching experience would be advantageous, particularly where influence is achieved without direct line management.
• Experience developing business cases, automating DPIAs or working within a private‑sector environment would be beneficial.

What's in It for You

• A senior consultancy role with genuine exposure to a varied client portfolio.
• The chance to work on complex privacy, governance, risk and AI‑related challenges.
• Regular interaction with senior decision‑makers and business leaders.
• The opportunity to shape and operationalise privacy programmes using OneTrust.
• A role where your expertise directly influences client strategy, compliance and business performance.
• Hybrid working, balanced with valuable face‑to‑face collaboration.
• Scope to broaden your consultancy, leadership and subject‑matter expertise across an evolving privacy landscape.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.