Data Protection & Privacy Compliance Lead

Volkswagen Group; Middle Aston; On-site; GBP 50,000 - 70,000; Full time

Job summary

VWFS UK is seeking a knowledgeable Data Protection Specialist to join our Legal & Compliance Team. You will help keep the business compliant with UK data protection laws, advise senior leaders, and support the DPO in statutory duties.

In this second-line role you will manage DPIAs, ROPA, data breaches, DSARs, and regulatory inquiries, while driving improvements in privacy processes and stakeholder engagement across the organisation.

Qualifications

• Proven data protection advisory experience in Compliance/Legal.
• Strong knowledge of ICO guidance and regulatory expectations in consumer credit or retail banking.
• Ability to manage complex, time-sensitive workloads with precision.
• Research, analyse, interpret and present regulatory information clearly.
• Able to challenge views and interpret guidance with accuracy and proportionality.
• Excellent communication and stakeholder engagement, with influencing/negotiation skills.

Responsibilities

• Provide expert guidance on UK Data Protection laws and regulatory changes.
• Maintain Registers of Processing Activities (ROPA).
• Assist with Data Protection Impact Assessments (DPIA).
• Lead the assessment, oversight, and reporting of personal data breaches.
• Act as a contact for DSARs, complaints and litigation matters.
• Develop and execute second-line monitoring to assess compliance.
• Liaise with the ICO on complaints and regulatory enquiries.
• Collaborate with Legal & Compliance and stakeholders to resolve data protection issues.
• Drive continuous improvement to enhance compliance and efficiency.

Skills

Data protection advice

ICO guidance

Regulatory expectations

Regulatory interpretations

Communication

Stakeholder engagement

Job description

VWFS UK is seeking a knowledgeable Data Protection Specialist to join our Legal & Compliance Team. You will help keep the business compliant with UK data protection laws, advise senior leaders, and support the DPO in statutory duties.

In this second-line role you will manage DPIAs, ROPA, data breaches, DSARs, and regulatory inquiries, while driving improvements in privacy processes and stakeholder engagement across the organisation.