Data Protection Project Manager (fixed term contract)

Reiss Limited; City Of London; On-site; GBP 40,000 - 60,000; Full time

Job summary

A prominent UK fashion retailer is seeking a proactive Data Protection Project Manager for a 3-month fixed-term contract. This role involves implementing a robust governance framework and ensuring compliance with data protection regulations across the business. The ideal candidate will have hands-on experience in the field, strong project management skills, and an ability to communicate effectively with stakeholders. Benefits include competitive salary and generous employee discount.

Benefits

Competitive salary

Employee discount up to 65%

Access to exclusive sample sales

Wellbeing services

Health support plan

Pension contributions

Enhanced parental leave

Cycle to Work programme

Further workplace benefits

Qualifications

• Hands-on experience implementing governance frameworks, not just managing them.
• Background in data protection regulations in the UK, EU, and US.
• Ability to operate independently under tight project timelines.

Responsibilities

• Deliver and embed the core data protection governance framework.
• Collaborate with compliance functions to ensure consistent application of standards.
• Draft and implement essential data protection policies and operational procedures.
• Manage compliance and audit queries, coordinating timely responses.
• Lead Data Protection Impact Assessments (DPIAs) and manage vendor reviews.

Skills

Data protection regulations interpretation

Governance framework implementation

Policy documentation

Stakeholder engagement

Audit management

Incident response

Project management

Data mapping

Job description

What’s the role about?

We’re looking for a proactive and delivery-focused Data Protection Project Manager to lead the implementation of a robust governance and compliance framework across the organisation. This is a hands‑on role, ideal for someone who’s ready to roll up their sleeves and deliver meaningful, tangible outputs.

The role will focus on foundational data protection work, embedding key operational procedures and processes aligned to the ICO Accountability Framework, with immediate impact across the business. You’ll also support broader compliance areas including PCI‑DSS, carbon reporting, and audit readiness.

This role is a 3-month fixed-term contract.

Who you are

• A data protection and compliance specialist with hands‑on experience implementing governance frameworks, not just managing them.
• Strong ability to operate independently and deliver at pace in a project environment with tight timelines.
• Experienced in interpreting regulatory requirements (e.g. GDPR, UK DPA, ICO) and translating them into real‑world, operational processes.
• Skilled in documenting policies, responding to incidents, and managing subject access and vendor risk requests.
• Confident in working with senior stakeholders and cross‑functional teams to define and implement compliance policies and procedures.
• A natural problem‑solver with excellent communication and stakeholder engagement skills.
• Experienced in audits, data mapping, DPIAs, and tools that support compliance functions.
• Ideally familiar with data protection regulations in the UK, EU, and US.

What you’ll be doing

• Deliver and embed the core data protection governance framework, working closely with business leaders and the Group Data Protection Officer to align with the ICO Accountability Framework and embed it into daily operations.
• Support the wider compliance function by collaborating with the Group-level Senior Compliance Officer to ensure consistent application of standards.
• Draft and implement essential data protection policies, operational procedures, and incident response plans, including clear protocols for escalation, investigation, and reporting. Ensure all documentation meets both legal and Group-level requirements.
• Own and manage incoming compliance and audit queries, coordinating responses to internal and external audits. Work cross‑functionally with Legal, People, IT, Retail, Sourcing, and Operations teams to gather evidence and deliver responses accurately and on time.
• Establish and manage the Data Protection Mailbox, clearing existing backlogs, setting up an efficient triage and escalation process, and tracking all activity for audit‑readiness.
• Learn and document existing business processes from internal stakeholders, identifying gaps and opportunities for improvement. Translate these into practical, privacy‑aligned procedures that are clear, repeatable, and easy to follow.
• Lead the delivery of key compliance activities, including Data Protection Impact Assessments (DPIAs), data subject access requests (DSARs), vendor and third‑party reviews, and data mapping updates. Maintain records such as ROPA, asset registers, and audit trails to evidence compliance.

What we offer

• Competitive salary.
• Up to 65% employee discount.
• Access to exclusive sample sales.
• Aviva DigiCare+ wellbeing services.
• Medicash health support plan.
• Workplace pension contributions.
• Enhanced parental leave policies.
• Cycle to Work programme.
• Plus further workplace benefits.

If you want to start your story at Reiss as our Data Protection Project Manager, don’t miss out – apply now!

#WeAreReiss

We recognise the importance and power of diversity within our business and, as such, we ensure that our people processes are fair, transparent and promote equality of opportunity for all candidates.

It is our pledge that candidates will not be discriminated against on the grounds of gender, gender identity or expression, pregnancy, marital status, age, race, colour, ethnic background, nationality, disability, sexual orientation, religion, religious or similar belief. Every individual will be treated with respect.

We know that some people won’t apply for a role unless they feel they meet all of the requirements listed. We want you to know that finding people who will add to our inspirational culture and have a learning mindset is incredibly important to us. Even if you feel you don’t tick all the boxes, we’d still like to hear from you.