Senior Data Privacy & Risk Consultant – Hybrid

Howden; Birmingham; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Discretionary bonus

Life assurance 4x salary

Income protection 75% for 5 years

Private medical insurance

25 days' annual leave (27 days after 5

Flexible benefits programme

Job summary

Howden is seeking an experienced Senior Risk & Compliance Consultant (Data Privacy Consultant / DPO) to join the Birmingham office on a hybrid basis. The role is permanent and ideally full-time (36.25 hours) with part-time considered.

You will support diverse client portfolios, perform DPIAs, privacy gap analyses, and audits, and advise on AI processing privacy risks across sectors. You will manage incidents, data subject rights, and regulatory notifications, while delivering privacy training

Qualifications

• Experience delivering both proactive privacy advisory services and reactive support.
• Ability to quickly understand different business models, risk profiles, and regulatory environments.
• Practical experience handling data breaches and data subject rights requests.
• Experience assessing AI and automated processing activities involving personal data, including risk, transparency and accountability.
• Demonstrated ability to conduct third-party privacy risk assessments and data sharing arrangements.
• Capable of producing high-quality, structured audit and assessment reports.
• Experience designing and delivering privacy training and awareness sessions.

Responsibilities

• Support multiple client engagements across sectors in a busy consulting environment.
• Proactively assess and improve clients' data protection and privacy posture, including DPIAs and audits.
• Advise on privacy implications of AI and automated processing for personal data.
• Conduct third-party privacy assessments and supplier due diligence.
• Produce clear audit reports with prioritized recommendations.
• Provide calm, pragmatic advice during data breaches and incident response.
• Deliver privacy education and training tailored to audiences.
• Collaborate with legal, information security and business teams to embed privacy.
• Maintain awareness of GDPR/UK GDPR and guidance; manage a small team of consultants.

Skills

Multi-client environment

Regulatory understanding

Incident response

AI privacy risk

Third-party risk

Written outputs

Privacy training delivery

Clear communication

Business awareness

Regulated sectors experience

Job description

Howden is seeking an experienced Senior Risk & Compliance Consultant (Data Privacy Consultant / DPO) to join the Birmingham office on a hybrid basis. The role is permanent and ideally full-time (36.25 hours) with part-time considered.

You will support diverse client portfolios, perform DPIAs, privacy gap analyses, and audits, and advise on AI processing privacy risks across sectors. You will manage incidents, data subject rights, and regulatory notifications, while delivering privacy training