Data Protection Manager

LHH; Cambridge; Hybrid; GBP 50,000 - 62,000; Full time

Job summary

LHH is seeking a Data Protection Manager for their Cambridge office, operating in a hybrid model. This key position focuses on managing the organisation's data protection, privacy, and AI governance operations. The successful candidate will have strong operational expertise in GDPR and related processes.

You will be responsible for day-to-day privacy management, coordinate DSARs, and support data breach incidents while enhancing compliance records and guiding various stakeholders. Join us to contribute to the organisation's privacy culture and innovation.

Qualifications

• Experience working in a corporate, multi-layered organisation.
• Hands-on experience managing DSARs and privacy risk processes.
• Strong practical knowledge of GDPR and data protection frameworks.

Responsibilities

• Manage day-to-day privacy and data protection operations.
• Own and coordinate DSARs end-to-end.
• Lead on data breaches and incident management.

Skills

Strong stakeholder management

GDPR knowledge

Analytical mindset

Experience with DSARs

Communication skills

Job description

Location: Cambridge (hybrid – minimum two days a week office based)

Role Type: Permanent | Full-Time

Salary guide: £50,000 - £62,000 per annum

We are working with a highly regarded organisation seeking a new hire for a Data Protection Manager. This is a key operational and advisory role supporting the delivery and continuous improvement of a complex privacy, information governance and AI compliance framework across a large, multi-stakeholder organisation.

The Role

Reporting into the Head of Data Protection, you will play a central role in the day-to-day running of the organisation’s data protection, privacy, AI governance and information governance activities. This is a hands‑on role with real operational ownership, ideal for someone who enjoys balancing advisory work with execution and case management. You will act as a trusted point of contact for privacy matters, ensuring risks are identified, managed and escalated appropriately, while supporting the embedding of privacy by design across business operations.

Key Responsibilities

• Manage day-to-day privacy, data protection, AI governance and information governance operations
• Own and coordinate DSARs (access, erasure, rectification, objection requests) end-to-end
• Lead on data breaches and incident management, including logging, investigation support and regulatory input where required
• Support and advise on DPIAs and privacy risk assessments, embedding privacy-by-design across projects and systems
• Maintain and enhance core compliance records including ROPA, privacy risk registers, incident logs and policy documentation
• Act as first-line contact for privacy queries, triaging and escalating complex matters
• Support and review AI-related risk assessments and governance processes, including high‑risk sign‑off workflows
• Deliver clear reporting, metrics and insights for governance forums and senior stakeholders
• Contribute to training, awareness and privacy culture initiatives across the organisation
• Deputise for the Head of Data Protection when required
• Support wider information governance requirements, including Freedom of Information handling and records management
• Engage with stakeholders across legal, compliance, HR, technology and business teams in a matrix environment

About You

We are looking for a confident, hands‑on privacy professional with strong operational experience and the ability to thrive in a complex, fast‑paced environment.

Essential experience and skills

• Experience working in a corporate, multi-layered organisation (large-scale or matrix environments preferred)
• Strong practical knowledge of GDPR and wider data protection frameworks
• Hands‑on experience managing DSARs, DPIAs, breaches and privacy risk processes
• Ability to translate legal and regulatory requirements into clear, practical guidance
• Strong stakeholder management and communication skills across all levels
• Comfortable working autonomously while knowing when to elevate appropriately
• Analytical mindset with experience producing reporting and risk insights

Desirable (not essential)

• Exposure to or genuine interest in AI governance / responsible AI frameworks
• Experience working across international jurisdictions or global teams
• Familiarity with information governance frameworks beyond core privacy compliance
• Experience supporting or mentoring junior team members

The Ideal Profile

This role would suit someone who enjoys being close to the operational detail of privacy compliance, while also contributing to strategic improvements. You will be comfortable managing competing priorities, working across multiple stakeholders, and ensuring compliance standards are consistently met. A strong interest in emerging technologies, including AI, and how they intersect with data protection is highly valued.

Why Apply?

This is an opportunity to join a forward‑thinking organisation where privacy, governance and responsible innovation are key priorities. You will play a pivotal role in shaping how data protection is delivered day‑to‑day while contributing to broader organisational maturity in privacy and AI governance.

Interested?

Apply now or get in touch for a confidential discussion.