Data Protection Manager

Allen Lane; England; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading recruitment partner is seeking a Data Protection Manager to join the Governance team in the London area. This role requires strong expertise in GDPR and data compliance, focusing on embedding a culture of privacy within the organization. Responsibilities include leading data protection activities, supporting governance frameworks, and ensuring adherence to statutory regulations. The ideal candidate will have professional certifications, a solid understanding of compliance requirements, and the ability to effectively communicate complex information. This position offers a strategic role with the potential to transition into the DPO role over time.

Qualifications

• Ability to design and implement record retention schedules.
• High integrity and discretion when handling sensitive information.
• Commitment to support Reside's Principles.

Responsibilities

• Lead on all aspects of data protection and governance.
• Conduct internal audits on data compliance.
• Develop and maintain data retention schedules.
• Act as key advisor on compliance matters.

Skills

Strong working knowledge of GDPR

Excellent organisational skills

Strong communication skills

Proficient in Microsoft Office

Knowledge of ICO guidance

Ability to deliver training

Education

Professional certifications (CIPM, CISM, C-DPO)

Tools

Data management systems

Job description

Allen Lane are partnering with Barking & Dagenham Reside on their recruitment for a Data Protection Manager to join their Governance team.

Job Purpose

The Data Protection Manager will lead on all aspects of data protection, data governance, retention schedules, and data compliance across B&D Reside, ensuring that personal and organisational data is managed securely, lawfully, and in line with GDPR, UK Data Protection Act, and other relevant legislation. This role is pivotal in embedding a strong culture of privacy and compliance throughout the organisation, safeguarding resident and corporate information, and reducing risk.

Beyond core data protection duties, the position will contribute to wider corporate compliance activities, including supporting governance frameworks, risk management processes, and assurance reporting. The role will involve developing and maintaining policies, supporting internal audits, and ensuring adherence to regulatory requirements across multiple business areas. Acting as a key advisor on compliance matters, the role will work closely with internal teams and external partners to ensure B&D Reside meets its obligations under housing and other statutory requirements.

While the B&D Reside currently retains an external Data Protection Officer (DPO), this position will build internal capability and may transition into the DPO role over time. The successful candidate will play a strategic role in shaping compliance practices, delivering staff training, and supporting innovation in secure data management and governance.

Key Accountable Areas

Data Protection & Governance

• Develop, implement, and maintain data retention schedules in line with GDPR and UK Data Protection Act, as well as with the Local Authority
• Monitor compliance with data protection laws and internal policies across all business units.
• Lead on Data Protection Impact Assessments and ensure fair and compliant Data Transfers between Reside and third parties.
• Act as the first point of contact and lead on data breaches, ensuring timely investigation, reporting, and remediation.
• Oversee and provide internal support to Freedom of Information (FOI), Subject Access Requests (SAR) and other data subject rights processes.
• Maintain accurate records of processing activities and ensure readiness for ICO audits.
• Draft and update data protection policies, privacy notices, and related compliance documentation.
• Ensure policies are communicated effectively and embedded across the organisation.
• Deliver training sessions and awareness campaigns for staff on data protection and privacy best practices.
• Provide guidance and support to teams on compliance requirements and best practice.
• Develop clear communication strategies for residents regarding their data rights.

Corporate Compliance & Assurance

• Support wider compliance activities, including governance frameworks, risk management, counter fraud, anti-money-laundering and assurance reporting.
• Conduct internal audits on data compliance and support on reporting for governance committees.
• Support on corporate contracting, including reviewing third-party contracts for data processing clauses and ensure supplier compliance.
• Assist with anti-money laundering checks and other statutory compliance requirements.
• Build capability to assume DPO responsibilities over time and liaise with external DPO and regulatory authorities.

Person Specification\

BD Reside is an agile and growing organisation, and your role may change over time as we continue to grow and mature. Some of the responsibilities may change from time to time in line with agreed expectations and your proven skill set.

• Strong working knowledge of GDPR, UK Data Protection Act, and related regulations.
• Ability to design and implement record retention schedules.
• Excellent organisational skills and attention to detail.
• Ability to effectively work as a subject matter expert
• High integrity and discretion when handling sensitive information.
• Strong communication skills, able to explain complex compliance requirements clearly.
• Proficient in Microsoft Office and data management systems.
• Knowledge of ICO guidance and regulatory reporting requirements.
• Committed to and able to demonstrate behaviours that support Reside’s Principles
• Professional certifications (e.g., CIPM, CISM, C-DPO or similar).
• Experience in housing or other regulated sectors.
• Knowledge of cyber security principles and privacy by design.
• Experience in risk management, governance, or internal audit.
• Ability to deliver training and awareness sessions.

Please include a cover letter along with your CV to apply for this role.

Application deadline: 12PM 19th January 2026

Data Protection Manager • London Area, United Kingdom, United Kingdom