Privacy Officer, Data Subject Access Requests

NatWest Group; City of Edinburgh; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading financial services company is seeking a Privacy Officer, Data Subject Access Requests (DSARS). This role involves providing guidance on data protection and privacy, managing regulatory requirements, and driving collaboration to ensure compliance. Candidates should have strong privacy knowledge and be adept at managing stakeholder relationships. The position offers a hybrid working model with a minimum of 6 days a month in the office.

Qualifications

• Experience in the regulatory and commercial environment.
• Ability to implement simple and fair solutions.

Responsibilities

• Provide expertise on data protection and privacy queries.
• Drive collaboration across the function for data protection training.
• Ensure quality control of privacy models and identify gaps.
• Ensure customer communications meet FCA requirements.

Skills

Ability to absorb complex information

Stakeholder management

Strong privacy knowledge

Understanding of DSARS

Job description

Join us as a Privacy Officer, Data Subject Access Requests (DSARS)

• This is an opportunity to take on a critical role and deliver a right first-time culture across the function
• We’ll look to you to manage regulatory protection requirements, making sure they're interpreted and implemented
• You’ll be recognised for doing the right thing for our customers, putting their interests at the heart of all you do and at the centre of all activities
• You’ll work from home some of the time, but you’ll also spend a minimum of 6 days a month working from our Bristol, Manchester or Edinburgh office

What you'll do

As a Privacy Officer, DSARS, you’ll be providing expertise and guidance to colleagues across the function at all levels in response to data protection and privacy queries.

You’ll be driving collaboration with the first line of defence across the function to ensure an effective and up-to-date awareness of data protection and privacy policies, while engaging with each area within the function to provide data protection training and to help identify high risk processes.

You’ll also be responsible for:

• The quality control of our current privacy model, business gap identification and remediation for the function to prevent customer concerns
• Making sure all customer communications meet the requirements of the FCA, and are clear, fair and evidence fair outcomes for customers
• Escalating processes to deliver a consistent approach to all stakeholders
• Supporting a continuous improvement culture and making sure best practices and learnings are shared across the business areas and forums

The skills you’ll need

We’re looking for someone with experience of the industry, including the regulatory and commercial environment.

You’ll also need:

• The ability to absorb complex information and implement solutions that are simple, easy and fair
• A background in managing stakeholders and the ability to influence senior management
• Knowledge of the relevant legal policies, regulations and risk management
• Strong privacy knowledge with an understanding of DSARS

Please contact Andrew Lyon with any questions

Hours

35

Job Posting Closing Date: 31/10/2025

Ways of Working:Hybrid