Data Protection Manager at UCL

UCL; Greater London; Hybrid; GBP 56,000 - 66,000; Full time

Benefits offered by this job

Hybrid and flexible working

USS pension scheme

41 days annual leave (including bank &

Staff discounts

Electric vehicle lease scheme

Museum access

Job summary

UCL is seeking a Data Protection Manager in London to lead the Data Protection and Information Rights team, deputising for the Head of Data Protection and supervising junior staff. You will provide expert advice on data protection, DPIAs, and data breach responses, shaping governance across a major university.

The role emphasizes collaboration with stakeholders, training, and engagement with the ICO, with hybrid working and strong progression opportunities.

Qualifications

• Significant experience in data protection roles including operational advisory work.
• Strong knowledge of UK GDPR, the Data Protection Act 2018 and related legislation.
• Experience drafting and reviewing DPIAs and advising on complex processing and data-sharing arrangements.

Responsibilities

• Lead on and support advisory services including DPIAs, data breach management, and contractual and research-related data protection advice.
• Deputise for the Head of Data Protection and supervise junior colleagues.
• Provide guidance and training for staff and students; engage with ICO as required.
• Maintain proportionate, workable data governance across a large, complex institution.

Skills

Line management

UK GDPR

DPIAs drafting

Stakeholder engagement

Guidance & training

Analytical skills

Written & verbal communication

Confidentiality

Time management

Education

Degree or equivalent

Job description

Apply for Data Protection Manager at UCL in London, ENG, GB. This Full time on site position offers great opportunities for career growth.

Ref Number B27-00134 Professional Expertise Legal, Governance and Secretariat Department Office of General Counsel (B27) Location London Working Pattern Full time Salary £56,431-£66,437 Contract Type Permanent Working Type Hybrid Available for Secondment No Closing Date 30-Sept-2026

About us

UCL is a global powerhouse: over 50,000 students, 16,000 staff and an annual turnover of £1.9bn, consistently ranked among the world's top 10 universities. Behind that scale sits the Office of the General Counsel - led by the General Counsel, reporting directly to the President and Provost - bringing together Legal Services, Data Protection and Information Rights, Governance, Policy and Risk to keep UCL's ambitions on a sound legal and governance footing. The Data Protection and Information Rights team is the specialist advisory unit you'll be joining. It advises across the whole University on data protection and freedom of information, from day-to-day queries to complex, high-profile issues - giving you genuine breadth and the chance to shape how a major research institution handles data responsibly.

About the role

As Data Protection Manager, you'll be a senior member of the Data Protection and Information Rights team, delivering expert, practical guidance that helps UCL comply confidently with the UK GDPR and related legislation. You'll get involved in the full range of advisory work - data breaches, data protection impact assessments, contracts, research data, and direct engagement with the Information Commissioner's Office where needed. It's a role with real influence: you'll deputise for the Head of Data Protection, supervise and develop junior colleagues, and help embed proportionate, workable data governance across a huge and varied institution.

What You’ll Be Doing

Management and leadership Work as an active member of the Data Protection and Information Rights team, aligned to the department's strategy, deputising for the Head of Data Protection as required.

• Take on line management responsibilities where assigned - supervising junior colleagues and overseeing the quality of their work.


• Contribute to projects and working groups, with oversight of direct reports to ensure good delegation, quality control and timely escalation of risk.


• Work closely with the Head of Data Protection and the Data Protection Administrator/Web Editor to keep work allocated fairly, cover consistent, and the team running efficiently.


• Spot data protection issues early and escalate them proactively where needed.

Delivering expert data protection advice: Lead on and support advisory services including DPIAs, data breach management, contractual and research-related data protection advice, and guidance and training for staff and students. Contribute to engagement with the Information Commissioner's Office as required. Support horizon-scanning, reporting and briefings that keep UCL ahead of a fast-moving regulatory landscape.

Partner with stakeholders across the Office of the General Counsel, UCL and its wider group, giving proportionate, practical advice that helps people get on with their work. Represent the Data Protection and Information Rights team on working groups where required.

About you

You’ll thrive in this role if you can bring:

Essential

• A degree or equivalent relevant experience, with significant experience in data protection roles, including operational advisory work.


• Strong working knowledge of UK GDPR, the Data Protection Act 2018, PECR and related legislation.


• Experience drafting and reviewing/assuring DPIAs, and advising on complex data processing and data-sharing arrangements.


• A track record producing guidance, tools and training for staff and students.


• Confidence handling a range of data protection issues independently, reacting quickly and calmly to emerging issues.


• Strong relationship-building skills, with excellent written and oral communication and the ability to present to varied audiences.


• Sound judgement, strong analytical skills, and the organisational rigour to manage competing, time-critical demands with accuracy.


• A high level of tact, diplomacy and regard for confidentiality.

Desirable

• A collaborative communication style - listening closely and speaking with clarity to colleagues, students and partners.


• A strong sense of ownership and accountability for your own decisions and actions.


• An appreciation of the dynamics of higher education, even without direct sector experience.

What we offer

Up to 41 days' annual leave (27 days plus closure days and bank holidays), with the option to purchase additional leave.

One of the most highly regarded pension schemes in the sector (USS).

Hybrid and flexible working, genuinely supported in practice, not just on paper.

A strong culture of professional development — training, mentoring and the chance to broaden your expertise across a wide-ranging advisory portfolio.

Staff discounts, season ticket loans, an electric vehicle lease scheme, and access to UCL's world-class museums, lectures and events.

The chance to shape how a world-leading university handles data — work that genuinely matters, at real scale.

Our commitment to Equality, Diversity and Inclusion

As London's Global University, we know diversity fosters creativity and innovation. We are committed to equality of opportunity, to being fair and inclusive, and to being a place where we all belong. We particularly encourage applications from candidates underrepresented in UCL’s workforce, including those from Black, Asian and ethnic minority backgrounds, disabled people, and - for Grade 9 and 10 roles – women. Read more: UCL Equality, Diversity and Inclusion.

Applicants should also familiarise themselves with UCL’s policies on: Prevention of Bullying, Harassment and Sexual Misconduct Policy and Personal Relationships Policy