Senior Data Protection Manager

St. John; Cirencester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

28 days annual leave + bank holidays (

Private Medical Insurance

Generous Pension Scheme

Enhanced Parental Leave

Protection Benefits

EV salary sacrifice scheme

Job summary

St. John is seeking an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring top-tier compliance and privacy risk management.

Reporting to the Director of Group Data Governance, Protection and Privacy, you will head a five-person team, shaping strategy and acting as deputy to the Director on complex privacy matters. You will own DSAR processes, develop risk frameworks, monitor risk appetite, and oversee significant data

Qualifications

• Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.
• Significant experience in a senior Data Protection or Privacy leadership role.
• Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.
• Experience developing and implementing enterprise-wide privacy frameworks.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience managing relationships with regulators, particularly the ICO and FCA.
• Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.
• A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.

Responsibilities

• Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.
• Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.
• Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.
• Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.
• Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.
• Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.
• Act as a trusted adviser on complex data protection and privacy matters across the business.

Skills

DSAR management

Privacy leadership

Regulatory liaison

Stakeholder management

Privacy risk management

Education

CIPP/E / CIPM / CIPT certification

Job description

Are you ready tochart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking the capabilities needed for future success. This includes significantly investing in technology, streamlining the way we work and creating an environment where colleagues feel engaged, empowered and accountable; where they can show up, speak up and perform - because we believe in the difference our work makes.

At a glance:

Location: Cirencester Office

Workplace Type: Hybrid

Employment Type: Permanent

Seniority: Mid-Senior Level

About the Role

We're looking for an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring SJP maintains the highest standards of data protection compliance and privacy risk management.

Reporting to the Director of Group Data Governance, Protection and Privacy, you'll lead a team of five specialists and play a pivotal role in shaping data protection strategy, managing privacy risks, and driving compliance across the organisation. You'll also act as deputy to the Director and serve as a key point of contact for complex privacy matters.

What you'll be doing:

• Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.
• Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.
• Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.
• Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.
• Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.
• Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.
• Act as a trusted adviser on complex data protection and privacy matters across the business.

Essential Criteria:

• Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.
• Significant experience in a senior Data Protection or Privacy leadership role.
• Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.
• Experience developing and implementing enterprise-wide privacy frameworks.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience managing relationships with regulators, particularly the ICO and FCA.
• Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.
• A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.

Desirable

• Knowledge of international privacy regulations.
• Experience managing third-party suppliers and vendor risk.
• Change management experience.
• Background in customer-facing or client-focused environments.

What's in it for you?

Whatever stage of life you're in, our benefits are designed to provide the support, flexibility, and peace of mind you need to thrive both at work and beyond.

In addition to our discretionary annual bonus scheme, which reflects both individual and company performance, you'll benefit from a market-leading benefits package tailored to support your wellbeing, financial security, and family life.

Our benefits include:

• 28 days' annual leave plus bank holidays, with the option to purchase up to 5 additional days.

• Private Medical Insurance – company-funded cover for you and your immediate family
• Generous Pension Scheme – a non-contributory employer contribution of 10%, increasing with length of service up to 15%, plus the opportunity to increase this through salary sacrifice
• Enhanced Parental Leave – up to 26 weeks' full pay to support growing families.
• Protection Benefits – company-funded critical illness cover, income protection, and life assurance
• EV salary sacrifice scheme through Tusker

Reasonable Adjustments

We’re an equalopportunities employer and want to ensure our recruitment process is accessibleand inclusive for all, if you require reasonable adjustment(s) at any stageplease let us know by emailing us at [e-mail] Research tells usthat applicants (especially those from underrepresented groups) can be put offfrom applying for a role if they do not meet all the criteria or have been onan extended career-break. If you think you would be a good match for this role andcan demonstrate some transferable experience.