GRC & Data Protection Manager

Liberty Blume; Greater London; Hybrid; GBP 85,000 - 130,000; Full time

Benefits offered by this job

25 days annual leave

Birthday off + 3 extra days at 5 years

Wellbeing & mental health benefits

Pension contribution up to 10%

Car benefit scheme

Learning platform access

Job summary

Liberty Blume is seeking a GRC & Data Protection Manager in London (Kings Cross) for a permanent, hybrid role with three days in the office. You will shape and embed data protection governance and risk management frameworks across the business, acting as the subject matter expert on GDPR, AI governance, and related regulatory requirements.

Responsibilities include policy development, risk assessments, DPIAs, supplier risk oversight, and cross-functional engagement to ensure compliance and

Qualifications

• A relevant bachelor’s degree is required.
• Strong knowledge of GDPR/UK GDPR, AI governance, and privacy regulations.
• Experience with risk management frameworks (ISO 31000, ISO 27001).
• Professional data protection certifications (IAPP CIPP/E, CIPM, CIPT) are highly beneficial.

Responsibilities

• Enhance and integrate governance frameworks for data protection, AI governance, and risk management.
• Develop policies and procedures related to data protection and risk management.
• Lead on controls for risk identification, assessment, mitigation, and reporting.
• Conduct DPIAs and AI assessments for new projects and services.
• Maintain risk registers and track KRIs across the organization.
• Oversee third-party management, including supplier risk assessments.

Skills

Regulatory knowledge

Risk assessment

Data protection expertise

Cross-functional collaboration

Education

Bachelor's degree

Tools

OneTrust

Job description

We’re looking for GRC & Data Protection Manager to join our team in London. Kings Cross on a permanent basis. This hybrid role offers flexibility, with expectations of spending three days in the office.

As the GRC & Data Protection Manager, you will play a pivotal role in shaping and embedding Liberty Blume’s data protection governance and broader risk management frameworks. Serving as the organisation’s subject matter expert, you will identify and assess data protection, artificial intelligence (AI), and regulatory risks, implement effective control measures, and ensure our governance standards are compliant, resilient, and fully integrated across business operations. This position operates at the crossroads of data protection, AI governance, and wider compliance activity within Liberty Blume’s Governance, Risk & Compliance function.

What will you be doing?

• Enhance and integrate our governance framework(s) related to data protection (GDPR/UK GDPR), AI Governance (EU AI Act) and risk management (ISO 31000), alongside wider legislation and standards
• Developing and advising on policies and procedures related to data protection, AI Governance and risk management
• Lead on the development and enhancement of controls used for risk identification, assessment, mitigation, and reporting
• Conduct risk and impact assessments, AI assessments and Data Protection Impact Assessments (DPIAs) for new projects, products and services
• Support with risk triaging, maintaining our Governance, Risk & Compliance on risk register and tracking trends and key risk indicators (KRIs)
• Overseeing Third Party Management for Blume’s suppliers and vendors, including supplier risk assessments
• Provide expert advice to business stakeholders on data protection, privacy by design and risk management
• Developing and dissemination of guidance and checklists (eg. on DPIAs, supplier due diligence) for different business units
• Advising and engaging in discussions with vendors, suppliers and B2B customers, where requested by business stakeholders
• Organise and attend cross functional governance and compliance meetings and forums
• Maintain Liberty Blume’s awareness of industry developments and regulations around data protection, AI governance, quality management and other areas

We tend to look for people with:

Essential:

• A relevant bachelor’s degree.
• Strong knowledge and hands‑on experience with GDPR/UK GDPR, the EU AI Act, the ePrivacy Directive, and other major regulatory frameworks (e.g., CCPA, HIPAA, EU Data Act).
• Understanding and practical experience with risk management and assessment frameworks such as ISO 31000 and ISO 27001.
• Professional data protection certifications (e.g., IAPP CIPP/E, CIPM, CIPT, AIGP) are highly beneficial.
• Certifications aligned to ISO standards are an advantage.
• Significant, relevant professional experience in a comparable role.
• Proven ability to conduct robust risk and compliance assessments.
• Experience developing or implementing data protection or risk management frameworks within an organisation.

Desirable:

• Exposure to additional ISO standards (e.g., ISO 9001, 14001, 45001, 22301).
• Familiarity with global privacy laws across the US, Latin America, and Asia.
• Experience using privacy management tools such as OneTrust.
• Demonstrated ability to collaborate effectively across functions.
• Strong analytical and research skills.
• Ability to quickly understand the technology underpinning Liberty Blume’s products and services, along with associated policy considerations.
• Strong organisational skills, with an ability to prioritise work and meet challenging deadlines.
• Experience working in a fast‑paced, dynamic environment.
• An understanding of the commercial, legal, and regulatory context in which Liberty Blume operates.

What’s in it for you?

• Competitive salary
• 25 days annual leave with the option to purchase 5 more.
• Enjoy your birthday off, plus receive an additional 3 days of annual leave once you reach 5 years of service.
• Access to wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance, plus many more.
• Matched pension contribution up to 10%
• Access to our car benefit scheme
• Access to our online learning platform to continue to develop and grow your career with us
• The chance to join an innovative, fast-paced and passionate team

Who we are:

Liberty Blume, a Liberty Global company, is a rapidly growing business services provider, specialising in tech-enabled back-office solutions. Our mission is to deliver efficiency, scale and value to our customers through Business, Procurement and Financial Solutions. If you’re curious, customer centric and enjoy being one step ahead, join us on our scale up journey and unlock your freedom to grow!

Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates. We’re eager to hear from you, no matter your background.