Privacy & Compliance Coordinator

Arriva Group; Birmingham; Hybrid; GBP 28,000 - 36,000; Full time

Job summary

Arriva Group is seeking a proactive Privacy and Compliance Coordinator to join the Risk and Compliance team in Birmingham (Hybrid). You will support privacy, information governance and compliance activities, ensuring regulatory obligations are met and records are accurately maintained.

You'll coordinate SARs/FOI/EIR requests, manage ROPA and governance registers, and assist with policy reviews. The role offers exposure to audits, reporting and cross-team collaboration within a supportive culture.

Qualifications

• Understanding of data protection principles and UK GDPR.
• Ability to handle confidential information with discretion.
• Excellent attention to detail and organisational skills.
• Experience maintaining records, trackers, registers or admin systems.
• Strong written and verbal communication, collaborating across levels.

Responsibilities

• Manage and triage Data Protection and Compliance inboxes and route complex queries.
• Coordinate and monitor SARs, FOI, EIR requests and other data subject rights requests.
• Monitor GDPR rights requests across Arriva and CrossCountry systems.
• Maintain RO PA and information governance registers and guidance docs.
• Support review and maintenance of data protection policies and processes.
• Track mandatory compliance training and follow up to ensure completion.
• Assist with audits, assurance reviews and action tracking.
• Produce reports, dashboards and management information for Risk and Compliance.
• Maintain SharePoint sites, registers and records across teams.
• Promote good data protection and information governance practices across the business.
• Support awareness campaigns and wider risk/compliance initiatives.

Skills

Data protection

UK GDPR

Organised

Attention to detail

Communication

Education

Info governance/compliance training

Tools

SharePoint

Microsoft Lists

Visio

Excel

Outlook

Job description

Closing Date: 12th November 2026 Are you highly organised, detail-oriented and passionate about data protection and compliance? We're looking for a proactive Privacy and Compliance Coordinator to join our Risk and Compliance team.

Location: Birmingham (Hybrid) Closing Date: 12th November 2026 Are you highly organised, detail-oriented and passionate about data protection and compliance? We're looking for a proactive Privacy and Compliance Coordinator to join our Risk and Compliance team.

Reporting to the Head of Risk and Compliance, you will play a key role in supporting the delivery of our privacy, information governance and compliance activities. Working across the business, you'll help ensure we meet our regulatory obligations, maintain accurate records and support a culture of compliance.

This is an excellent opportunity for someone looking to develop or build a career in privacy, information governance or compliance within a collaborative and supportive environment.

What You'll Be Doing

• Managing and triaging the Data Protection and Compliance inboxes, responding to routine enquiries and directing more complex queries appropriately.
• Coordinating and monitoring Subject Access Requests (SARs), Freedom of Information (FOI) requests, Environmental Information Regulation (EIR) requests and other data subject rights requests, ensuring deadlines are met.
• Monitoring customer and employee GDPR rights requests across Arriva and CrossCountry systems.
• Maintaining and updating the Record of Processing Activities (ROPA) and other information governance registers.
• Supporting the review and maintenance of data protection policies, procedures, guidance and process documentation.
• Monitoring mandatory compliance training and following up with colleagues and managers to ensure timely completion.
• Assisting with compliance monitoring, internal audits, assurance reviews and action tracking.
• Producing reports, dashboards and management information to support the Risk and Compliance function.
• Maintaining Risk and Compliance SharePoint sites, registers, trackers and records.
• Building positive working relationships across the business to promote good data protection and information governance practices.
• Supporting awareness campaigns and communications relating to privacy, compliance and information governance.
• Assisting with wider Risk and Compliance projects and initiatives as required.
• Undertaking any other duties appropriate to the role.

About You

You’ll be organised, proactive and able to manage multiple priorities while maintaining exceptional attention to detail. You enjoy working collaboratively and communicating with colleagues across all levels of an organisation.

Essential

• Good understanding of data protection principles and UK GDPR.
• Ability to handle confidential and sensitive information with discretion.
• Excellent attention to detail.
• Experience maintaining records, trackers, registers or administrative systems.
• Strong organisational skills with the ability to prioritise competing workloads.
• Ability to work independently as well as part of a team.
• Ability to meet deadlines in a fast-paced environment.
• Excellent communication and interpersonal skills, including:
  • Professional written communication.
  • Confidence communicating with colleagues at all levels.
  • Ability to build positive working relationships.
• Proficient in Microsoft Office applications, including Outlook, Excel, Word, PowerPoint, Copilot and Teams.

Desirable

• Experience supporting Subject Access Requests (SARs), FOI requests, EIR requests or other regulatory information requests.
• Experience working within a compliance, governance, risk or information governance environment.
• Knowledge of UK GDPR, the Data Protection Act 2018 and Freedom of Information legislation.
• Experience maintaining compliance registers and governance records.
• Experience supporting audits, assurance reviews or compliance monitoring.
• Qualification or training in Information Governance, Data Protection or Compliance.
• Experience using SharePoint.
• Familiarity with Microsoft Lists and Visio.

Why Join Us?

This role offers the opportunity to work across a broad range of privacy, compliance and information governance activities while developing valuable experience in a supportive team. You'll work closely with colleagues across the organisation, contribute to meaningful projects and play an important role in helping the business maintain high standards of compliance and governance.