Senior Data Protection Manager

St. James's Place; Cirencester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

28 days' annual leave + bank holidays

Private Medical Insurance

Generous Pension Scheme

Enhanced Parental Leave

Protection Benefits

EV salary sacrifice

Job summary

St. James's Place in Cirencester is seeking a Senior Data Protection Manager to lead and continuously enhance our Data Protection and Privacy Framework.

You will report to the Director of Group Data Governance, Protection and Privacy and manage a team of five specialists to shape strategy and ensure privacy risk management across the organisation. You will own DSAR processes, develop risk frameworks, and liaise with regulators such as the ICO while guiding cross-functional privacy initiatives

Qualifications

• Must hold professional data protection qualification (CIPP/E, CIPM or CIPT).
• Extensive experience in senior data protection or privacy leadership.
• Proven DSAR, privacy breach investigations and complaints management.
• Strong knowledge of UK GDPR and Data Protection Act 2018.
• Experience with regulator engagement (ICO/FCA) and vendor risk.

Responsibilities

• Lead DSAR process and ensure statutory compliance.
• Own and develop Data Protection and Privacy Risk Framework.
• Define and report on data risk appetite and governance.
• Lead and develop a team of DP/DSAR specialists.
• Manage data breaches and regulatory notifications.
• Oversee third-party data protection risks and supplier compliance.
• Lead responses to data protection complaints and ICO engagement.
• Advise the business on complex data protection matters.

Skills

Data protection

Privacy leadership

DSAR management

Breach investigations

Regulatory liaison

Stakeholder mgmt

Privacy by design

Risk management

Education

CIPP/E, CIPM or CIPT certification

Job description

Are you ready to chart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking the capabilities needed for future success. This includes significantly investing in technology, streamlining the way we work and creating an environment where colleagues feel engaged, empowered and accountable; where they can show up, speak up and perform - because we believe in the difference our work makes.

At a glance:

Location: Cirencester Office

Workplace Type: Hybrid

Employment Type: Permanent

Seniority: Mid-Senior Level

About The Role

We're looking for an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring SJP maintains the highest standards of data protection compliance and privacy risk management.

Reporting to the Director of Group Data Governance, Protection and Privacy, you'll lead a team of five specialists and play a pivotal role in shaping data protection strategy, managing privacy risks, and driving compliance across the organisation. You'll also act as deputy to the Director and serve as a key point of contact for complex privacy matters.

What you'll be doing:

• Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.
• Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.
• Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.
• Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.
• Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.
• Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.
• Act as a trusted adviser on complex data protection and privacy matters across the business.
• Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.
• Significant experience in a senior Data Protection or Privacy leadership role.
• Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.
• Experience developing and implementing enterprise-wide privacy frameworks.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience managing relationships with regulators, particularly the ICO and FCA.
• Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.
• A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.
• Knowledge of international privacy regulations.
• Experience managing third-party suppliers and vendor risk.
• Background in customer-facing or client-focused environments.

What's in it for you?

Whatever stage of life you're in, our benefits are designed to provide the support, flexibility, and peace of mind you need to thrive both at work and beyond.

In addition to our discretionary annual bonus scheme, which reflects both individual and company performance, you'll benefit from a market-leading benefits package tailored to support your wellbeing, financial security, and family life.

Our benefits include:

• 28 days' annual leave plus bank holidays, with the option to purchase up to 5 additional days.
• Private Medical Insurance – company-funded cover for you and your immediate family
• Generous Pension Scheme – a non-contributory employer contribution of 10%, increasing with length of service up to 15%, plus the opportunity to increase this through salary sacrifice
• Enhanced Parental Leave – up to 26 weeks' full pay to support growing families.
• Protection Benefits – company-funded critical illness cover, income protection, and life assurance
• EV salary sacrifice scheme through Tusker

Reasonable Adjustments

We're an equal opportunities employer and want to ensure our recruitment process is accessible and inclusive for all, if you require reasonable adjustment(s) at any stage please let us know by emailing us at [e-mail]

As a business regulated by the FCA we would advise you to familiarise yourself with the conduct regulations and in particular consumer duty obligations prior to an interview with SJP.