Senior Data Protection Lead — Privacy Operations

Domestic & General; Nottingham; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Health cash plan

Company pension

Life assurance

Car leasing

Cycle to Work

Gym membership

Employee discounts

Job summary

Domestic & General is seeking a Senior Data Protection Manager to lead the privacy programme within Risk & Compliance. You will oversee DPIAs, incidents, transfers and monitor compliance with UK GDPR, EU GDPR, and DPA 2018. This role demands strong stakeholder engagement and a hands-on approach to risk-based privacy controls.

The position is hybrid, based at our Wimbledon office, with a comprehensive benefits package and opportunities to drive data protection strategy across the organisation.

Qualifications

• Strong knowledge of UK GDPR, EU GDPR and related privacy regimes.
• Experience managing DPIAs, DSRs and privacy incidents.
• Ability to translate complex requirements into practical controls.
• Excellent stakeholder management and communication skills.
• Recognised data privacy qualification preferred (CIPP/E, CIPM, CIPT).

Responsibilities

• Manage day-to-day privacy operations, ensuring DPIAs, incidents and DSRs are progressed.
• Own the quality and consistency of privacy processes, templates, records and reporting inputs.
• Provide senior risk-based advice to business teams on projects, transfers and privacy-by-design.
• Lead operational privacy risk assessments and escalate material risks.
• Prepare management information, KRIs and compliance insights for senior stakeholders.
• Support the GDPO in regulatory inquiries and responses.
• Provide leadership and coaching to Analysts and privacy colleagues.

Skills

UK GDPR

EU GDPR

DPIAs

DSRs

Privacy by design

Stakeholder management

Communication

Education

CIPP/E

Job description

Domestic & General is seeking a Senior Data Protection Manager to lead the privacy programme within Risk & Compliance. You will oversee DPIAs, incidents, transfers and monitor compliance with UK GDPR, EU GDPR, and DPA 2018. This role demands strong stakeholder engagement and a hands-on approach to risk-based privacy controls.

The position is hybrid, based at our Wimbledon office, with a comprehensive benefits package and opportunities to drive data protection strategy across the organisation.