PrivacyRisk &Compliance Officer

Tp-8f723eaf; West of England; On-site; GBP 59,000 - 81,000; Full time

Job summary

Privacy, Risk & Compliance Officer role based in Bristol, UK, leads privacy, risk and governance across the business. You will partner with HR, IT, Legal and Operations to embed regulatory requirements and global standards.

The role reports into country management with dotted lines to the Regional Privacy Officer and Head of Risk, leading privacy notices, GDPR compliance, risk registers and audits. Strong stakeholder engagement and OneTrust experience are essential.

Qualifications

• Experience in privacy, risk or compliance roles.
• Solid knowledge of data protection legislation and GDPR.
• Strong analytical, problem-solving and communication skills.

Responsibilities

• Oversee privacy, risk and compliance frameworks across the UK business.
• Maintain Records of Processing in OneTrust and ensure records are up to date.
• Lead the implementation and maintenance of the Risk Management Framework.
• Provide governance, reporting and guidance to senior leadership and global teams.
• Support client contracts and due diligence related to privacy and compliance.

Skills

Privacy & Compliance

GDPR Knowledge

Risk Management

Stakeholder Management

Data Protection

Audit

Education

Bachelor's degree or equivalent

Tools

OneTrust

Job description

Overview

Responsibilities

PrivacyRisk &Compliance Officer

Salary- 70k & Great Benefits

Location- Bristol

About the Role

We are seeking an experienced and highly motivated Privacy, Risk & Compliance Officer to support and oversee the effective delivery of our Privacy, Risk and Compliance frameworks across the UK business.

This is a key role within the organisation, providing oversight, guidance and assurance across data privacy, regulatory compliance, operational risk and internal controls.

Working closely with senior leadership and teams across HR, Recruitment, Operations, IT, Procurement, Legal, Business Development and Account Management, you will ensure that regulatory requirements and global standards are effectively embedded throughout the business.

The role reports directly into the country management structure and maintains direct reporting relationships with the Regional Privacy Officer, Head of Risk and Head of Compliance.

Key Responsibilities

Privacy & Data Protection

• Oversee the implementation and ongoing management of privacy requirements across the business.
• Ensure appropriate privacy notices and consent documentation are issued and maintained for employees.
• Monitor personal data processing activities and identify new or changing processing requirements.
• Work closely with HR, Recruitment and other business functions to ensure privacy requirements are consistently applied.
• Support compliance with GDPR and other applicable data protection legislation.
• Act as a key point of contact for privacy-related queries, reviews and audits.

Records of Processing & OneTrust

• Maintain accurate and complete Records of Processing (ROP) within OneTrust.
• Ensure Controller and Processor records are appropriately documented and regularly reviewed.
• Identify and document new or amended personal data processing activities.
• Work with IT, Operations, Account Management and other functions to ensure records remain accurate and complete.
• Conduct quality reviews and challenge incomplete or inaccurate information where required.

Risk Management

• Lead the implementation and ongoing maintenance of the organisation’s Risk Management Framework.
• Identify, assess, monitor and report risks across the business.
• Work with senior management, risk owners and operational teams to ensure risks and internal controls are appropriately documented.
• Maintain accurate and comprehensive Risk Registers.
• Develop, monitor and support risk mitigation and remediation plans.
• Review the effectiveness of existing controls and recommend improvements.
• Escalate significant risk events in line with established governance processes.
• Provide regular risk and control reporting to the Global Risk Team.
• Promote a strong culture of risk awareness and accountability throughout the organisation.

Compliance & Governance

• Support the implementation, maintenance and monitoring of the Global Compliance Framework.
• Monitor relevant regulatory and legislative developments relating to Privacy, Risk and Compliance.
• Identify areas of non-compliance or control weakness and support appropriate corrective actions.
• Act as a key point of contact for GDPR, BCR and other Privacy and Compliance audits.
• Support the delivery of mandatory Privacy and Compliance training.
• Prepare regular reports and management information for senior leadership and Global Privacy, Risk & Compliance teams.
• Provide guidance and support to operational teams to ensure adherence to internal standards and regulatory requirements.

Client & Contract Compliance

• Work with Account Management, Business Development and Legal teams to ensure appropriate Privacy and Compliance provisions are included within client contracts.
• Support privacy amendments and negotiations relating to existing client agreements.
• Assist with client Privacy, Risk and Compliance due diligence.
• Provide updates and reporting on contractual privacy and compliance requirements.

Vendor Due Diligence

• Oversee Privacy and Compliance due diligence for new and existing vendors.
• Partner with local and global Procurement teams to ensure appropriate checks are completed.
• Review Vendor Due Diligence Questionnaires and approve or elevate findings where appropriate.
• Ensure required due diligence is completed before new vendor agreements are executed.

New Business & Client Support

• Support client bids and pre-sale discussions relating to Privacy, Risk and Compliance.
• Assist with client due diligence and assurance activities.
• Support new business go-live activity in line with established control frameworks.
• Provide specialist Privacy, Risk and Compliance guidance throughout mobilisation and implementation activities.

About You

• You will be an experienced Privacy, Risk or Compliance professional with the confidence to work across multiple functions and engage effectively with stakeholders at all levels of the organisation.
• You will bring strong analytical skills, sound judgement and the ability to translate complex regulatory requirements into clear and practical business solutions.

Essential Skills & Experience

• Previous experience within Privacy, Risk and/or Compliance.
• Strong working knowledge of data protection legislation and GDPR.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent communication and stakeholder-management capabilities.
• Strong influencing skills with the confidence to constructively challenge at all levels.
• Ability to manage multiple priorities within a complex business environment.
• High level of integrity and commitment to regulatory compliance and good governance.
• Proficient in Microsoft Office, including Excel and PowerPoint.
• Fluent in English.

Desirable

• Working knowledge of Anti-Money Laundering (AML) legislation and its application.
• Experience working with OneTrust or a similar Privacy/GRC platform.
• Experience supporting client audits, regulatory reviews or due diligence exercises.
• Professional qualification or certification within Privacy, Risk, Compliance or Security.
• Candidates without an existing recognised certification should be willing and able to obtain an appropriate certification within their first six months in the role.

Education

Bachelor’s degree or equivalent relevant professional experience.

Professional qualifications within Privacy, Risk Management, Compliance or Security would be advantageous.

#LI-CW1