Data Protection Manager — Strategy, Compliance & Tech Enablement

Octopus Energy Group; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Dog-friendly office

Flexible hybrid working

Salary discussion on call

Job summary

Octopus Energy Group's Octopus Electric Vehicles unit is seeking a seasoned Data Protection Manager to help shape our privacy program in the UK. You will work with the DPO and the existing DPM to ensure compliance with UK GDPR, PECR and related laws while enabling product teams building bespoke software for customers and internal use.

You’ll lead DPIAs, RoPA, LIAs, SARs, manage data breach responses, and drive training and awareness across the business.

Qualifications

• Proven track record delivering GDPR compliance in a fast-paced business.
• Experience working with software product teams building bespoke software.
• Familiar with modern tooling including Google Workspace and Slack.
• Ability to explain Data Protection concepts clearly.
• Forward-thinking, self-motivated and able to take responsibility for your own initiatives.

Responsibilities

• Develop our data protection strategy, policies, frameworks and tools to ensure compliance with UK GDPR, the Data Protection Act 2018, PECR and other relevant legislation.
• Advise on data privacy matters for teams across the company from software engineers, financial specialists to marketing and business development.
• Maintain records and documentation by leading Data Protection Impact Assessments (DPIAs), updating the RoPA, and conducting LIAs.
• Own and refine the end-to-end processes for Subject Rights Management including SARs and other data subject rights.
• Manage breaches including investigation, reporting, and communication with the ICO.
• Contribute to growth by supporting our business development teams with customer data protection agreements and enquiries.
• Manage risk by conducting due diligence for third-party suppliers and vendors.
• Raise awareness through design and delivering engaging data protection training and awareness campaigns.
• Monitor the evolving privacy regulatory landscape and report on the company's compliance and risk.

Skills

Privacy by design

UK GDPR

DPIA experience

Cross-functional collaboration

Explain data protection concepts

Tools

Google Workspace

Slack

Job description

Octopus Energy Group's Octopus Electric Vehicles unit is seeking a seasoned Data Protection Manager to help shape our privacy program in the UK. You will work with the DPO and the existing DPM to ensure compliance with UK GDPR, PECR and related laws while enabling product teams building bespoke software for customers and internal use.

You’ll lead DPIAs, RoPA, LIAs, SARs, manage data breach responses, and drive training and awareness across the business.