Data Protection SME

Exceed Cyber limited; Greater London; Presencial; GBP 112.000 - 147.000; Jornada completa

Descripción de la vacante

Exceed Cyber Limited seeks a Data Protection SME to support Third–Party Risk Management within a BAU team. You will assess supplier privacy controls, review evidence and attestations, and advise on risk-based decisions to improve supplier risk management capabilities.

The role is a short-term contract (Nov–end Jan) with a day rate of up to 700 inside IR35. You will work closely with the Data Protection Manager to strengthen the supplier assurance lifecycle and governance across projects.

Responsabilidades

• Review supplier–submitted data protection evidence and attestations as part of the TPRM assessment process.
• Assess the adequacy and effectiveness of privacy, data protection, and information governance controls.
• Provide expert guidance and recommendations to support risk–based assessment decisions.
• Support the Data Protection Manager in evaluating supplier compliance with applicable data protection requirements and organisational standards.

Descripción del empleo

Data Protection SME – Third Party Risk Management (TPRM)

Contract: Nov–end of Jan initially

Client: Financial services

Day rate: up to 700 inside IR35

Role Purpose

We are seeking an experienced Data Protection Subject Matter Expert (SME) to support the Third–Party Risk Management (TPRM) function within a Business–as–Usual (BAU) team. The role will provide specialist data protection expertise to support supplier risk assessments, evidence reviews, reporting, and continuous improvement activities across the supplier assurance lifecycle.

The successful candidate will work closely with the Data Protection Manager to assess supplier controls, review supporting evidence and attestations, identify risks and remediation opportunities, and contribute to the ongoing effectiveness of the TPRM framework.

• Review supplier–submitted data protection evidence and attestations as part of the TPRM assessment process.
• Assess the adequacy and effectiveness of privacy, data protection, and information governance controls.
• Provide expert guidance and recommendations to support risk–based assessment decisions.
• Support the Data Protection Manager in evaluating supplier compliance with applicable data protection requirements and organisational standards.