Privacy & Compliance Coordinator

XC Trains Limited; Birmingham; Hybrid; GBP 35,000 - 52,000; Full time

Job summary

Arriva is seeking a Privacy & Compliance Coordinator to join the Risk and Compliance team in Birmingham (Hybrid). You will support privacy, information governance and compliance activities, maintain records, and help ensure regulatory obligations are met.

The role involves cross-system coordination, reporting and supporting awareness campaigns. You will collaborate with colleagues across the organisation, manage requests, support audits and contribute to a culture of compliance while developing

Qualifications

• Understanding of data protection principles and UK GDPR.
• Experience maintaining records, trackers, registers or admin systems.
• Strong organisational skills with the ability to prioritise workloads.
• Excellent communication and collaboration across levels of an organisation.

Responsibilities

• Manage Data Protection and Compliance inboxes and triage enquiries.
• Coordinate and monitor SARs, FOI/EIR requests and data subject rights.
• Monitor GDPR rights requests across systems and maintain ROAs and registers.
• Support policy reviews, procedures and process documentation.
• Track mandatory compliance training and follow up for timely completion.
• Assist with audits, assurance reviews and action tracking.

Skills

Data protection

UK GDPR

Information governance

Record-keeping

Communication

Education

Information Governance training

Tools

Microsoft Office

Job description

Privacy & Compliance Coordinator

Location: Birmingham (Hybrid)

Closing Date: 12th November 2026

Are you highly organised, detail-oriented and passionate about data protection and compliance? We're looking for a proactive Privacy and Compliance Coordinator to join our Risk and Compliance team. Reporting to the Head of Risk and Compliance, you will play a key role in supporting the delivery of our privacy, information governance and compliance activities. Working across the business, you'll help ensure we meet our regulatory obligations, maintain accurate records and support a culture of compliance. This is an excellent opportunity for someone looking to develop or build a career in privacy, information governance or compliance within a collaborative and supportive environment.

What You'll Be Doing

• Managing and triaging the Data Protection and Compliance inboxes, responding to routine enquiries and directing more complex queries appropriately.
• Coordinating and monitoring Subject Access Requests (SARs), Freedom of Information (FOI) requests, Environmental Information Regulation (EIR) requests and other data subject rights requests, ensuring deadlines are met.
• Monitoring customer and employee GDPR rights requests across Arriva and CrossCountry systems.
• Maintaining and updating the Record of Processing Activities (ROPA) and other information governance registers.
• Supporting the review and maintenance of data protection policies, procedures, guidance and process documentation.
• Monitoring mandatory compliance training and following up with colleagues and managers to ensure timely completion.
• Assisting with compliance monitoring, internal audits, assurance reviews and action tracking.
• Producing reports, dashboards and management information to support the Risk and Compliance function.
• Maintaining Risk and Compliance SharePoint sites, registers, trackers and records.
• Building positive working relationships across the business to promote good data protection and information governance practices.
• Supporting awareness campaigns and communications relating to privacy, compliance and information governance.
• Assisting with wider Risk and Compliance projects and initiatives as required.
• Undertaking any other duties appropriate to the role.

About You

You'll be organised, proactive and able to manage multiple priorities while maintaining exceptional attention to detail. You enjoy working collaboratively and communicating with colleagues across all levels of an organisation.

Essential Good understanding of data protection principles and UK GDPR. Ability to handle confidential and sensitive information with discretion. Excellent attention to detail. Experience maintaining records, trackers, registers or administrative systems. Strong organisational skills with the ability to prioritise competing workloads. Ability to work independently as well as part of a team. Ability to meet deadlines in a fast-paced environment. Excellent communication and interpersonal skills, including: Professional written communication. Confidence communicating with colleagues at all levels. Ability to build positive working relationships. Proficient in Microsoft Office applications, including Outlook, Excel, Word, PowerPoint, Copilot and Teams.

Desirable Experience supporting Subject Access Requests (SARs), FOI requests, EIR requests or other regulatory information requests. Experience working within a compliance, governance, risk or information governance environment. Knowledge of UK GDPR, the Data Protection Act 2018 and Freedom of Information legislation. Experience maintaining compliance registers and governance records. Experience supporting audits, assurance reviews or compliance monitoring. Qualification or training in Information Governance, Data Protection or Compliance. Experience using SharePoint. Familiarity with Microsoft Lists and Visio.

Why Join Us?

This role offers the opportunity to work across a broad range of privacy, compliance and information governance activities while developing valuable experience in a supportive team. You'll work closely with colleagues across the organisation, contribute to meaningful projects and play an important role in helping the business maintain high standards of compliance and governance.

Arriva is a leading provider of passenger transport across Europe, employing around 34,400 people and delivering around 1.6 billion passenger journeys. With buses, trains, coaches, trams, waterbuses, bike-sharing systems, on-demand transport solutions and a rolling stock leasing company, Arriva proudly connects people and communities safely, reliably and sustainably across 11 countries, delivering these services in a better way, every day. The activities of Arriva are divided into four business units: UK Bus, UK Trains, The Netherlands and Mainland Europe. Arriva has passenger transport operations in the Czech Republic, Croatia, Hungary, Italy, the Netherlands, Poland, Slovakia, Slovenia, Spain and the United Kingdom, and also operates a rolling stock leasing company in Romania.

Things that must mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory