GRC & Data Protection Lead (AI, GDPR, ISO)

Virgin Media Business Ireland; Camden Town; Hybrid; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Competitive salary

25 days annual leave plus 5

Birthday off and extra leave after 5 y

Job summary

Liberty Blume is seeking a GRC & Data Protection Manager in London (hybrid). You will embed data protection governance, AI governance and risk management across the organisation, acting as the subject matter expert on GDPR, AI Act, DPIAs and supplier risk.

Strong regulatory expertise and professional certifications are highly valued. Responsibilities include policy development, control enhancements, DPIAs, risk reporting and stakeholder advisory across business units.

Qualifications

• Strong knowledge of GDPR/UK GDPR, EU AI Act, ePrivacy Directive and other major regulatory frameworks
• Understanding of ISO 31000 and ISO 27001 risk frameworks
• Professional data protection certifications (IAPP CIPP/E, CIPM, CIPT, AIGP) are beneficial

Responsibilities

• Enhance governance frameworks for data protection, AI governance and risk management
• Develop policies and procedures related to data protection, AI governance and risk
• Lead development of controls for risk identification, assessment, mitigation and reporting
• Conduct DPIAs and AI assessments for new projects and services
• Support risk triaging and maintain risk registers and KRIs
• Oversee Third Party Management and supplier risk assessments
• Advise stakeholders on data protection and privacy by design
• Produce guides and checklists for DPIAs and due diligence
• Engage with vendors and business units, organize governance meetings
• Stay updated on data protection, AI governance and regulatory developments

Skills

GDPR/UK GDPR

AI governance

ISO 31000

ISO 27001

Regulatory frameworks

IAPP certifications

Privacy by design

Risk management

Education

Bachelor’s degree

Job description

Liberty Blume is seeking a GRC & Data Protection Manager in London (hybrid). You will embed data protection governance, AI governance and risk management across the organisation, acting as the subject matter expert on GDPR, AI Act, DPIAs and supplier risk.

Strong regulatory expertise and professional certifications are highly valued. Responsibilities include policy development, control enhancements, DPIAs, risk reporting and stakeholder advisory across business units.