Data Protection Governance Specialist

Collinson Group; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Collinson Group is seeking a Data Protection Governance Specialist to help develop, maintain and enhance its data protection compliance framework. The role supports the Group DPO and the Data Protection team to ensure policies, procedures and guidance are accurate, practical and aligned with regulatory requirements.

The role focuses on strengthening accountability, improving framework maturity and applying data protection requirements in a clear and risk-based way across the business.

Qualifications

• Accredited qualifications in information governance, records management and/or data protection (BCS/CIPP).
• Expert knowledge of data protection across multiple jurisdictions and compliance management.
• Proven experience advising on data protection programmes in complex environments.
• Ability to explain data protection risks clearly to non-technical audiences.
• Proven project management skills with a delivery focus.
• Strong understanding of risk and compliance frameworks.

Responsibilities

• Support maintenance and enhancement of the data protection framework to stay aligned with laws.
• Review and update data protection policies, templates and guidance materials.
• Collaborate with the Group DPO to improve core documentation accessibility and consistency.
• Support embedding governance processes across the business with clear ownership and escalation routes.
• Assist with implementing accountability framework aligned to regulatory expectations such as the ICO Accountability Framework.
• Maintain data protection governance records including policy registers and control trackers.
• Develop practical guidance for stakeholders on lawful basis, retention and transfers.

Skills

Information governance

Data protection laws

Risk management

Project management

Policy development

Communication skills

Documentation

Non-technical explanation

Education

BCS/CIPP accreditation

Job description

Job Description

The Role

We have an exciting new role opportunity within Risk and Compliance for a Data Protection Governance Specialist. This role will be instrumental in supporting the development, maintenance and enhancement of Collinson's data protection compliance framework. Working as part of the Data Protection team, the role will focus on ensuring data protection policies, procedures, guidance documents, templates and governance materials are accurate, consistent, practical and aligned with applicable legal and regulatory requirements. The role will help strengthen accountability, improve framework maturity and support the business in applying data protection requirements in a clear, proportionate and risk-based way.

Key Responsibilities

• Support the maintenance and enhancement of Collinson's data protection compliance framework, ensuring policies, standards, procedures and guidance remain accurate, practical and aligned to applicable data protection laws.

• Review, update and develop data protection policies, process documents, templates, playbooks, checklists and internal guidance materials.

• Work with the Group DPO and wider Data Protection team to improve the structure, consistency and accessibility of core data protection documentation.

• Support the embedding of data protection governance processes across the business, including clear ownership, escalation routes, approval flows and evidence of compliance.

• Assist with the implementation and ongoing improvement of the organisation's data protection accountability framework, including alignment with recognised regulatory expectations such as the ICO Accountability Framework.

• Help maintain key data protection governance records, including policy registers, control trackers, action logs, compliance evidence and framework maturity assessments.

• Support the development of practical guidance for business stakeholders on topics such as lawful basis, transparency, retention, international transfers, DPIAs, process management, records of processing and data protection by design and by default.

• Assist in identifying gaps, inconsistencies or outdated materials within the existing data protection framework and propose proportionate improvements.

• Work with stakeholders across various business functions to gather information and support the implementation of framework improvements.

• Support the preparation of data protection reporting materials, including progress updates, risk summaries, action plans and governance dashboards.

• Contribute to the development and refresh of data protection training and awareness materials, ensuring they reflect current policies, processes and regulatory expectations.

• Assist with the rollout and communication of updated data protection policies, procedures and guidance to relevant business areas.

• Support readiness activities for audits, assurance reviews and regulatory accountability requirements by helping collate documentation and evidence of compliance.

• Monitor and help document changes in internal processes, business activities or regulatory expectations that may require updates to the data protection framework.

• Promote a pragmatic, risk-based approach to data protection governance, ensuring documentation and processes are clear, usable and proportionate for the business.

Knowledge, Skills and Behaviours

Essential

• Accredited qualifications in information governance, records management and/or data protection (BCS/CIPP), or equivalent gained through relevant experience.

• Expert knowledge of data protection and applicable legislation across multiple jurisdictions, information security controls and compliance management.

• Proven experience in advising on and/or implementing data protection compliance programmes in complex environments.

• Able to explain data protection risks, and how they apply, clearly and in non-technical language to the business.

• Proven project management skills with a focus on delivery and results.

• A thorough understanding of best practice in risk management and compliance frameworks.

• Ability to interpret information, identify risk and provide feedback in a clear and concise manner.

• Attention to detail and able to interpret information, make sound decisions and take ownership of issues to resolution.

• Excellent interpersonal and communication skills, both written and oral.

• Organised, with time management skills and an ability to work under pressure and flexibly to meet business deadlines.

• Experience of using tools and technology to train, communicate and improve risk culture, and demonstrable experience in developing simple, effective and easy-to-adopt policies.

• Solid understanding of regulations, industry standards and leading industry practices.

Reward & Benefits: What's in it for me?

We want our people to feel recognised, supported and able to thrive both at work and beyond it.

We offer a competitive reward package designed to support your financial, physical and mental wellbeing, alongside opportunities to learn, develop and be recognised for the contribution you make. Benefits vary by role and location, and full details will be shared as part of the application process.

Equal opportunities: Our commitment to inclusion

Collinson Group is an equal opportunities employer. We welcome applications from people of all backgrounds, identities and experiences, and believe that different perspectives make our business stronger.