GRC & Data Protection Lead – GDPR & AI Governance

Liberty Blume; Greater London; Hybrid; GBP 85,000 - 130,000; Full time

Benefits offered by this job

25 days annual leave

Birthday off + 3 extra days at 5 years

Wellbeing & mental health benefits

Pension contribution up to 10%

Car benefit scheme

Learning platform access

Job summary

Liberty Blume is seeking a GRC & Data Protection Manager in London (Kings Cross) for a permanent, hybrid role with three days in the office. You will shape and embed data protection governance and risk management frameworks across the business, acting as the subject matter expert on GDPR, AI governance, and related regulatory requirements.

Responsibilities include policy development, risk assessments, DPIAs, supplier risk oversight, and cross-functional engagement to ensure compliance and

Qualifications

• A relevant bachelor’s degree is required.
• Strong knowledge of GDPR/UK GDPR, AI governance, and privacy regulations.
• Experience with risk management frameworks (ISO 31000, ISO 27001).
• Professional data protection certifications (IAPP CIPP/E, CIPM, CIPT) are highly beneficial.

Responsibilities

• Enhance and integrate governance frameworks for data protection, AI governance, and risk management.
• Develop policies and procedures related to data protection and risk management.
• Lead on controls for risk identification, assessment, mitigation, and reporting.
• Conduct DPIAs and AI assessments for new projects and services.
• Maintain risk registers and track KRIs across the organization.
• Oversee third-party management, including supplier risk assessments.

Skills

Regulatory knowledge

Risk assessment

Data protection expertise

Cross-functional collaboration

Education

Bachelor's degree

Tools

OneTrust

Job description

Liberty Blume is seeking a GRC & Data Protection Manager in London (Kings Cross) for a permanent, hybrid role with three days in the office. You will shape and embed data protection governance and risk management frameworks across the business, acting as the subject matter expert on GDPR, AI governance, and related regulatory requirements.

Responsibilities include policy development, risk assessments, DPIAs, supplier risk oversight, and cross-functional engagement to ensure compliance and