Privacy Programme Lead – GDPR & DPIA Expert

Rolls-Royce SMR Limited; East Midlands; Hybride; GBP 51 000 - 67 000; Plein temps

Avantages offerts par ce poste

Bonus up to 12.5%

Benefits Allowance £2,200

Pension 12%/6%

28 days holiday + public holidays

Private Medical Insurance - BUPA

Life Assurance 6x pensionable pay

Résumé du poste

Rolls-Royce SMR Limited is seeking a Senior Privacy Analyst to join our Information Management team, reporting to Head of Information Management and external Data Protection Officer. You will lead the day-to-day operation of our privacy programme and strengthen risk-based privacy controls as we grow in the UK and internationally.

You’ll own and maintain the Record of Processing Activities, establish DPIA processes, manage Data Subject Requests, and be the first point of contact for privacy

Qualifications

• Solid understanding of UK GDPR, Data Protection Act 2018, privacy principles, and privacy processes.
• Experience delivering privacy activities such as DSR handling, DPIAs, ROPA management, and risk-based decision-making.
• Strong stakeholder engagement in environments where privacy isn’t always the top priority.

Responsabilités

• Lead day-to-day operation of core privacy processes, including managing Data Subject Requests.
• Own and maintain Records of Processing Activities (ROPA) and drive updates across the organisation.
• Establish and operationalise the DPIA process, ensuring privacy is embedded in projects.
• Act as the first point of contact for privacy queries and support data breach responses.

Connaissances

UK GDPR knowledge

DSAR handling

DPIA process

ROPA management

risk-based decision making

Stakeholder engagement

Formation

IAPP qualifications: CIPP/E, CIPM, CIPT

Description du poste

Rolls-Royce SMR Limited is seeking a Senior Privacy Analyst to join our Information Management team, reporting to Head of Information Management and external Data Protection Officer. You will lead the day-to-day operation of our privacy programme and strengthen risk-based privacy controls as we grow in the UK and internationally.

You’ll own and maintain the Record of Processing Activities, establish DPIA processes, manage Data Subject Requests, and be the first point of contact for privacy