Hybrid Data Protection & Privacy Lead (UK & Ireland)

Card Factory; Wakefield; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Benefits package

Job summary

Card Factory in the United Kingdom is seeking a UK & Ireland Data Protection Officer to lead privacy across the business and ensure compliance with UK GDPR, EU GDPR, PECR, and related legislation.

The role involves embedding privacy by design, guiding stakeholders, and acting as the primary contact for regulators and data subjects. Two days weekly at the Wakefield site with flexible remote work options are available.

Qualifications

• Substantial DPO experience managing GDPR/PECR
• Ability to lead privacy operations and audits
• Experience guiding cross-functional teams on data protection

Responsibilities

• Develop Data Protection Strategy aligned to laws and business goals
• Maintain DPIAs, privacy notices, breach logs and SAR logs
• Lead audits to meet UK/EU GDPR and PECR requirements
• Act as primary contact for ICO and regulators
• Oversee breach management, reporting and mitigation
• Deliver privacy training and awareness programs
• Advise senior leaders on privacy risks and controls
• Oversee third-party supplier risk assessments
• Collaborate cross-functionally for a consistent privacy approach
• Monitor and report data protection risks to stakeholders

Skills

Risk management

Influencing

Security strategy

Legislative balance

People management

Tools

Microsoft Purview

OneTrust

Job description

Card Factory in the United Kingdom is seeking a UK & Ireland Data Protection Officer to lead privacy across the business and ensure compliance with UK GDPR, EU GDPR, PECR, and related legislation.

The role involves embedding privacy by design, guiding stakeholders, and acting as the primary contact for regulators and data subjects. Two days weekly at the Wakefield site with flexible remote work options are available.