Privacy Operations Lead – Data Rights & DPIA

Serco; Greater London; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Company car

Private healthcare

Bonus scheme 5% on target

Flexible working considered

Pension 6%

Job summary

Serco is seeking a Privacy Operations Manager in London to lead and improve the operational privacy services that support the UK organisation. You will report to the Data Protection Officer and own frameworks for Data Subject Rights, breach management, DPIA governance and privacy by design across the business.

This hands-on leadership role requires turning legal expectations into practical services, guiding teams, and escalating high‑risk matters as needed. Hybrid working in London is available.

Qualifications

• Experience managing operational privacy, compliance, legal operations, information governance, risk or assurance processes.
• Strong practical experience of Data Subject Rights, breach management and/or DPIA processes.
• Good working knowledge of UK GDPR, the Data Protection Act 2018 and operational privacy requirements.
• Experience creating and improving frameworks, procedures, guidance, templates and service standards.
• Ability to manage complex stakeholder queries and escalate sensitive matters.
• Strong reporting, prioritisation and continuous improvement capability in a demanding operational environment.

Responsibilities

• Own and continuously improve the Data Subject Rights operating model, including standards, escalation routes, performance monitoring and quality assurance.
• Maintain the data breach management framework and support consistent triage, assessment, documentation and lessons learned.
• Lead DPIA governance, templates, workflows, adviser support and quality assurance, embedding privacy by design into new and changing activity.
• Provide substantive operational privacy guidance for queries escalated through the Privacy Office triage process.
• Maintain practical frameworks, playbooks, guidance and process documentation for business teams and the privacy network.
• Monitor operational MI across DSRs, breaches, DPIAs and business queries to identify risks, capacity pressures and improvement priorities.
• Work closely with Governance & Assurance, Information Governance, Legal, HR, IT and operational teams.
• Escalate precedent‑setting, high‑risk or regulatory matters to the Data Protection Officer with clear evidence and options.

Skills

DSR management

Breach management

DPIA governance

Privacy by design

Stakeholder management

Operational reporting

Job description

Serco is seeking a Privacy Operations Manager in London to lead and improve the operational privacy services that support the UK organisation. You will report to the Data Protection Officer and own frameworks for Data Subject Rights, breach management, DPIA governance and privacy by design across the business.

This hands-on leadership role requires turning legal expectations into practical services, guiding teams, and escalating high‑risk matters as needed. Hybrid working in London is available.