Senior Data Privacy & Protection Lead

Domestic & General Group; Wimbledon; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

25 days leave

Pension scheme

Health cover

Life assurance

Employee discounts

Cycle to work

Employee portal

Job summary

Domestic & General is recruiting a Senior Data Protection Manager to join our Risk & Compliance team. The role is hybrid, based at Wimbledon with potential cross-site activity in the UK, and focuses on overseeing the data protection and privacy programme to ensure compliance with UK GDPR, EU GDPR, DPA 2018 and PECR.

You will manage DPIAs, incidents, DSRs and regulatory interactions, delivering risk-based guidance to business teams and supporting the GDPO with governance and external engagements.

Qualifications

• Strong knowledge of UK GDPR, EU GDPR, DPA 2018 and PECR/e-Privacy.
• Proven experience managing day-to-day privacy operations including DPIAs, incidents and DSRs.
• Ability to translate complex requirements into practical, risk-based advice and controls.
• Excellent communication, influencing and stakeholder management skills.
• Data privacy qualification (CIPP/E, CIPM, CIPT, or equivalent) preferred.

Responsibilities

• Manage day-to-day delivery of privacy operations, DPIAs, incidents and monitoring.
• Own quality and consistency of privacy processes, templates and records.
• Provide senior risk-based advice to business teams on projects, contracts and transfers.
• Lead risk assessments and escalate material risks to the GDPO.
• Prepare management information and regulatory responses for oversight.
• Support GDPR/privacy inquiries and coordinate follow-ups.
• Provide coaching and quality assurance to privacy analysts.

Skills

UK GDPR & data privacy laws

Privacy operations management

DPIAs & DSRs handling

Stakeholder management

Analytical & problem-solving

Education

CIPP/E CIPM CIPT or equivalent

Job description

Domestic & General is recruiting a Senior Data Protection Manager to join our Risk & Compliance team. The role is hybrid, based at Wimbledon with potential cross-site activity in the UK, and focuses on overseeing the data protection and privacy programme to ensure compliance with UK GDPR, EU GDPR, DPA 2018 and PECR.

You will manage DPIAs, incidents, DSRs and regulatory interactions, delivering risk-based guidance to business teams and supporting the GDPO with governance and external engagements.