Privacy & Data Protection Lead — Hybrid

SCOTTISH POWER UK PLC; Scotland; Hybrid; GBP 53,000 - 65,000; Full time

Benefits offered by this job

Annual leave 36 days

Holiday purchase

Share schemes

Payroll giving

Charity matched funding

Tech vouchers

EV scheme

Cycle to work

Season ticket loans

Healthcare options

Life assurance

Financial wellbeing

Job summary

ScottishPower is seeking a Data Protection Manager to lead data protection across People & Organisation and Health & Safety. The role partners with the Corporate Data Protection Officer to drive GDPR compliance and effective privacy risk management in a large, evolving organisation.

You will advise on privacy requirements, support training and awareness, and collaborate with senior stakeholders to embed controls, policies and regulatory obligations across the business.

Qualifications

• Experience in Data Protection, Privacy Compliance or related discipline.
• Strong working knowledge of GDPR and privacy legislation.
• Ability to analyse complex information to mitigate risk.
• Excellent communication and stakeholder management skills.
• Bachelor's degree or equivalent; DP qualification advantageous.

Responsibilities

• Lead on data protection across People & Organisation and Health & Safety.
• Provide expert advice on privacy requirements, contracts and regulatory obligations.
• Ensure assessments are completed and data protection controls remain effective.
• Support training and awareness initiatives; monitor KPIs and drive compliance.
• Represent the function at corporate forums and industry groups.

Skills

Data protection

GDPR

Privacy compliance

Stakeholder engagement

Communication

Education

Bachelor's degree or equivalent

Job description

ScottishPower is seeking a Data Protection Manager to lead data protection across People & Organisation and Health & Safety. The role partners with the Corporate Data Protection Officer to drive GDPR compliance and effective privacy risk management in a large, evolving organisation.

You will advise on privacy requirements, support training and awareness, and collaborate with senior stakeholders to embed controls, policies and regulatory obligations across the business.