GRC & Data Protection Manager

Liberty Blume Business Solutions Ltd; Camden Town; Hybrid; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Competitive salary

25 days annual leave plus 5

Birthday off and extra leave after 5 y

Job summary

Liberty Blume is seeking a GRC & Data Protection Manager in London (hybrid). You will embed data protection governance, AI governance and risk management across the organisation, acting as the subject matter expert on GDPR, AI Act, DPIAs and supplier risk.

Strong regulatory expertise and professional certifications are highly valued. Responsibilities include policy development, control enhancements, DPIAs, risk reporting and stakeholder advisory across business units.

Qualifications

• Strong knowledge of GDPR/UK GDPR, EU AI Act, ePrivacy Directive and other major regulatory frameworks
• Understanding of ISO 31000 and ISO 27001 risk frameworks
• Professional data protection certifications (IAPP CIPP/E, CIPM, CIPT, AIGP) are beneficial

Responsibilities

• Enhance governance frameworks for data protection, AI governance and risk management
• Develop policies and procedures related to data protection, AI governance and risk
• Lead development of controls for risk identification, assessment, mitigation and reporting
• Conduct DPIAs and AI assessments for new projects and services
• Support risk triaging and maintain risk registers and KRIs
• Oversee Third Party Management and supplier risk assessments
• Advise stakeholders on data protection and privacy by design
• Produce guides and checklists for DPIAs and due diligence
• Engage with vendors and business units, organize governance meetings
• Stay updated on data protection, AI governance and regulatory developments

Skills

GDPR/UK GDPR

AI governance

ISO 31000

ISO 27001

Regulatory frameworks

IAPP certifications

Privacy by design

Risk management

Education

Bachelor’s degree

Job description

We’re looking for GRC & Data Protection Manager to join our team in London. Kings Cross on a permanent basis. This hybrid role offers flexibility, with expectations of spending three days in the office. As the GRC & Data Protection Manager, you will play a pivotal role in shaping and embedding Liberty Blume’s data protection governance and broader risk management frameworks. Serving as the organisation’s subject matter expert, you will identify and assess data protection, artificial intelligence (AI), and regulatory risks, implement effective control measures, and ensure our governance standards are compliant, resilient, and fully integrated across business operations. This position operates at the crossroads of data protection, AI governance, and wider compliance activity within Liberty Blume’s Governance, Risk & Compliance function.

What will you be doing?

• Enhance and integrate our governance framework(s) related to data protection (GDPR/UK GDPR), AI Governance (EU AI Act) and risk management (ISO 31000), alongside wider legislation and standards
• Developing and advising on policies and procedures related to data protection, AI Governance and risk management
• Lead on the development and enhancement of controls used for risk identification, assessment, mitigation, and reporting
• Conduct risk and impact assessments, AI assessments and Data Protection Impact Assessments (DPIAs) for new projects, products and services
• Support with risk triaging, maintaining our Governance, Risk & Compliance on risk register and tracking trends and key risk indicators (KRIs)
• Overseeing Third Party Management for Blume’s suppliers and vendors, including supplier risk assessments
• Provide expert advice to business stakeholders on data protection, privacy by design and risk management
• Developing and dissemination of guidance and checklists (eg. on DPIAs, supplier due diligence) for different business units
• Advising and engaging in discussions with vendors, suppliers and B2B customers, where requested by business stakeholders
• Organise and attend cross functional governance and compliance meetings and forums
• Maintain Liberty Blume’s awareness of industry developments and regulations around data protection, AI governance, quality management and other areas

We tend to look for people with:

Essential:

• A relevant bachelor’s degree.
• Strong knowledge and hands‑on experience with GDPR/UK GDPR, the EU AI Act, the ePrivacy Directive, and other major regulatory frameworks (e.g., CCPA, HIPAA, EU Data Act).
• Understanding and practical experience with risk management and assessment frameworks such as ISO 31000 and ISO 27001.
• Professional data protection certifications (e.g., IAPP CIPP/E, CIPM, CIPT, AIGP) are highly beneficial.
• Certifications aligned to ISO standards are an advantage.
• Significant, relevant professional experience in a comparable role.
• Proven ability to conduct robust risk and compliance assessments.
• Experience developing or implementing data protection or risk management frameworks within an organisation.

Desirable:

• Exposure to additional ISO standards (e.g., ISO 9001, 14001, 45001, 22301).
• Familiarity with global privacy laws across the US, Latin America, and Asia.
• Experience using privacy management tools such as OneTrust.
• Demonstrated ability to collaborate effectively across functions.
• Strong analytical and research skills.
• Ability to quickly understand the technology underpinning Liberty Blume’s products and services, along with associated policy considerations.
• Strong organisational skills, with an ability to prioritise work and meet challenging deadlines.
• Experience working in a fast‑paced, dynamic environment.
• An understanding of the commercial, legal, and regulatory context in which Liberty Blume operates.

What’s in it for you?

• Competitive salary
• 25 days annual leave with the option to purchase 5 more.
• Enjoy your birthday off, plus receive an additional 3 days of annual leave once you reach 5 years of service.
• Access to wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance, plus many more.
• Matched pension contribution up to 10%
• Access to our car benefit scheme
• Access to our online learning platform to continue to develop and grow your career with us
• The chance to join an innovative, fast-paced and passionate team

Who we are:

Liberty Blume, a Liberty Global company, is a rapidly growing business services provider, specialising in tech-enabled back-office solutions. Our mission is to deliver efficiency, scale and value to our customers through Business, Procurement and Financial Solutions. If you’re curious, customer centric and enjoy being one step ahead, join us on our scale up journey and unlock your freedom to grow! Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates. We’re eager to hear from you, no matter your background. Our growth is creating great opportunities! Our team is expanding, and we want to hire the most talented people we can. Continued success depends on it!

Privacy Policy

The data included in the candidate account (eg. your name, e‑mail address and CV; hereafter collectively "your data") will be processed by Liberty Blume as the Controller for the purposes of candidate selection, placement and employment. Your data can also be shared with Liberty Blume plc and/or its majority owned subsidiaries (collectively, the “Liberty Blume”, “we” or “us”) and third party organizations providing recruitment, selection, placement and employment services. Such third parties will use candidate information only in connection with such services, and applicable law. Your data will be retained for the period of up to 1year after closing the selection process, after which it will be deleted. You have: the right to access your data or ask for a copy of the personal data that we hold about you and, if such personal data is inaccurate or incomplete, to request the rectification, erasure or blocking of such personal data. You have the right to object to the processing; and the right to lodge a complaint at a supervisory authority or a court of law in accordance with applicable laws. If you wish to exercise your privacy rights or if you have any questions about our use of your data or about your privacy rights please contact: [e-mail]