Data Protection Manager

Academic Key; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Job summary

Octopus Energy Group is seeking a Data Protection Manager in London to lead UK GDPR compliance and related privacy initiatives. You will work closely with the DPO and the existing DP Manager to embed policies, run DPIAs, and shape the technical landscape for data protection across product and business teams.

You will champion privacy by design, deliver training, and monitor evolving regulations while coordinating with cross-functional teams to safeguard customer data and support rapid business

Qualifications

• Strong knowledge of UK GDPR and Data Protection Act 2018
• Experience collaborating with software/product teams on privacy
• Ability to explain complex DP concepts clearly
• Familiarity with modern tooling and privacy training

Responsibilities

• Develop data protection strategy, policies, frameworks and tools.
• Advise on privacy matters across teams from software to marketing.
• Maintain records and DPIAs, RoPA, LIAs.
• Own end-to-end Subject Rights Management including SARs.
• Manage breaches and coordinate with the ICO.
• Support data protection considerations in third-party contracts and vendor due diligence.

Skills

Data protection

DPO coordination

Clear communication

Tech-savvy

Tools

Google Workspace

Slack

Job description

# Data Protection Manager**Octopus Energy Group** · London (GB)Abroad London (GB)◷ Full-time✓ Link validatedWhat we do. Electric Car Leasing Why we do it. Greener. Fairer. Future. We’re looking for a second Data Protection Manager to join our team and support our fast growing business. Working closely with our DPO and existing Data Protection Manager you’ll ensure we remain compliant with UK GDPR legislation and processes while also working with various teams to expand our capabilities and develop creative solutions to business challenges and opportunities to improve our service to both new and existing customers. Whilst this is a Data Protection role, we’re looking for someone technically experienced who can come in and shape the technical landscape of Data Protection as well as how we internally develop the tools to deliver these services to our business. What you'll do... Develop our data protection strategy, policies, frameworks and tools to ensure our compliance with UK GDPR, the Data Protection Act 2018, PECR and other relevant legislation. Advise on data privacy matters for teams across the company from software engineers, financial specialists to marketing and business development. Maintain records and documentation by leading Data Protection Impact Assessments (DPIAs), updating the Record of Processing Activities (RoPA), and conducting Legitimate Interest Assessments (LIAs). Own and refine the end-to-end processes for Subject Rights Management including Data Subject Access Requests (SARs) and other data subject rights. Manage breaches including investigation, reporting, and communication with the ICO. Contribute to growth by supporting our business development teams with customer data protection agreements and enquiries. Manage risk by conducting due diligence for third-party suppliers and vendors. Raise awareness through design and delivering engaging data protection training and awareness campaigns . Monitor the evolving privacy regulatory landscape and report on the company's compliance and risk. What you'll need... A passion for Data Protection and a proven track record of delivering compliance with legislation in a fast paced business. Experience working with software product teams building bespoke software for delivering customer and internal solutions. Familiarily with modern tooling including Google Workspace and Slack. The ability to explain Data Protection concepts in a clear and relatable way to those who may not be familiar with them. Forward-thinking, self-motivated and able to take responsibility for your own initiatives and drive them to implementation. Experience of working in a pressured environment, prioritising your work appropriately while maintaining high levels of attention to detail. Any of the following would be a bonus Awareness of Information Security principles and requirements for ISO27001 compliance Knowledge of the FCA regulation and experience in the financial services industry A background in technology Why you'll love it here Don't feel like you meet all of our hiring criteria? Thats OK, apply anyway! We'd love to hear from you and have a conversation. Octopus Electric Vehicles , part of the Octopus Energy Group, won the Sunday Times best company to work for in 2024. We were named 6th out of the top 100 start-ups to work for by Tempo in 2025 and on Glassdoor we were voted 50 best places to work in 2022 . Our Group CEO, Greg has recorded a podcast about our culture and how we empower our people Wondering what the salary for this role is? Just ask us! On a call with one of our recruiters it's something we always cover as we genuinely want to match your experience with the correct salary. The reason why we don't advertise is because we honestly have a degree of flexibility and would never want salary to be a reason why someone doesn't apply to Octopus - what's more important to us is finding the right octofit! Octopus Energy Group is a unique culture . An organisation where people learn, decide, and build quicker. Where people work with autonomy, alongside a wide range of amazing co-owners, on projects that break new ground. We want your hard work to be rewarded with perks you actually care about! Visit our perks hub - Octopus Employee Benefits Things to Note... just to let you know, we are dog friendly company so you may see our 4 legged friends in the offices - feel free to bring yours! Rest assured though, we've taken lots of precautions for those who have allergies We use AI to help us assess applications fairly and objectively. We’re totally fine with you using AI as a tool to help prepare too. That said, when we get to the interview and assessment stage, we’re really interested in hearing your unique perspective and real-world stories. That’s the stuff we can’t get from a bot or a prompt! About us The electric revolution has arrived - and from 2035 you’ll no longer be able to buy a new petrol or diesel car in the UK. We’re building a whole new way for drivers to join the electric charge and not only learn about and shop for their EV online, but experience a 'lease