Data Protection Manager

Torus Group; Liverpool; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Torus Group is seeking a Data Protection Manager to drive privacy governance and protect information across the group. The role requires strong leadership, stakeholder engagement and delivery of compliance programs while working across multiple sites from our Liverpool base.

You will partner with the outsourced DPO and Group Head of Improvement, Performance & Risk to shape risk-based privacy controls, manage DPIAs and LOAs, and foster a privacy-by-design culture throughout the organisation.

Qualifications

• Higher education qualification or equivalent training and experience.
• Professional Data Protection qualifications, Foundation and Practitioner level, or equivalent.
• Significant experience in data protection, GDPR and regulatory compliance within a complex organisation.
• Proven track record delivering operational services with measurable business benefits.
• Experience supporting and influencing stakeholders to achieve compliant and practical outcomes.
• Knowledge of data protection legislation, governance and risk management frameworks.
• Experience implementing process improvements while maintaining compliance.
• Strong leadership, with ability to develop and motivate teams.
• Excellent communication and relationship-building with colleagues, customers and board members.
• Strong project and change management capabilities; adaptable to changing priorities.

Responsibilities

• Provide expert data protection advice and support to managers and stakeholders across the Group.
• Lead and manage the operational delivery of data protection services, ensuring compliance with legislation and regulatory requirements.
• Collaborate with the outsourced Data Protection Officer and Group Head of Improvement, Performance & Risk to guide strategic direction.
• Oversee key data protection processes: Records of Processing Activities, policies, procedures and registers.
• Ensure robust data protection and data quality controls across the Group.
• Lead investigations into data protection breaches and near misses; identify root causes and remedial actions.
• Oversee and support Subject Access Requests in line with statutory requirements and policies.
• Carry out DPIAs and LIAs; advise on controls and mitigations.
• Develop relationships with stakeholders; provide practical, solution-focused advice and training.
• Promote a culture of privacy by design and data protection compliance.
• Support risk management, assurance and compliance frameworks; identify and manage risks.
• Lead, develop and support Data Protection Co-ordinator and Apprentice.
• Drive continuous improvement and value for money by streamlining processes and systems.

Skills

Data protection

Governance

Job description

We're looking for a Data Protection Manager to join our Business Assurance team. This is an exciting opportunity for an experienced data protection professional to take ownership of data protection compliance across the Group, ensuring robust governance, effective controls and a privacy-focused culture that supports the organisation's strategic ambitions.

Working Pattern:

This is an agile working role, with an expectation to attend The Observatory office in Liverpool city centre every Tuesday, as well as a minimum of two additional days per week in the office. The successful candidate must be able to work across all Torus Group offices as required to meet business needs. Flexibility will be required to support the demands of the role and the wider business.

What you'll be doing:

• Provide expert data protection advice and support to managers and stakeholders across the Group.
• Lead and manage the operational delivery of data protection services, ensuring compliance with relevant legislation and regulatory requirements.
• Work closely with the outsourced Data Protection Officer and Group Head of Improvement, Performance & Risk to support the strategic direction of data protection across Torus.
• Oversee and maintain key data protection processes, including Records of Processing Activities, policies, procedures and registers.
• Ensure robust data protection and data quality controls are in place and operating effectively across the Group.
• Lead investigations into data protection breaches and near misses, identifying root causes and implementing remedial actions where required.
• Oversee and support Subject Access Requests, ensuring they are managed in accordance with statutory requirements and organisational policies.
• Carry out and support Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs), providing advice on appropriate controls and mitigation measures.
• Develop strong working relationships with stakeholders, providing practical, solution-focused advice and training on data protection matters.
• Promote a culture of privacy by design and data protection compliance throughout the organisation.
• Support the delivery of risk management, assurance and compliance frameworks, ensuring risks are appropriately identified and managed.
• Lead, develop and support the Data Protection Co-Ordinator and Data Protection Apprentice.
• Drive continuous improvement and value for money through the review and streamlining of data protection processes and systems.

Higher education qualification or equivalent training and experience.

• Professional Data Protection qualifications, including Foundation and Practitioner level, or equivalent.
• Significant experience working within data protection, GDPR and regulatory compliance in a complex organisation.
• A proven track record of delivering operational services that provide measurable business benefits.
• Experience supporting and influencing stakeholders to achieve compliant and practical business outcomes.
• Knowledge and experience of data protection legislation, governance and risk management frameworks.
• Experience implementing process improvements and driving efficiencies while maintaining compliance.
• Strong leadership skills with experience managing, motivating and developing team members.
• Excellent communication and relationship-building skills, with the ability to engage effectively with colleagues, customers, board members and external partners.
• Strong project management and change management capabilities, with the ability to adapt to changing priorities.
• High levels of IT literacy and the ability to embrace new systems, technologies and ways of working.
• A proactive, resilient and self-motivated approach, with a commitment to continuous improvement and the Torus values of We Own, We Care and We Deliver.

Interview process:

• Shortlisted candidates will be invited to attend an in-person interview at our Liverpool City Centre Office.

Additional Information:

• Right to work verification.
• Qualification certificate check (where applicable).
• Two satisfactory references.
• Occupational Health questionnaire.