Senior Data Protection Manager

St. James’s Place; Cirencester; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

28 days annual leave

Private Medical Insurance

Generous Pension Scheme

Enhanced Parental Leave

Protection Benefits

EV salary sacrifice scheme

Job summary

St. James’s Place in Cirencester is seeking a Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring the highest standards of compliance.

You will report to the Director of Group Data Governance, Protection and Privacy and oversee a team of five specialists, shaping strategy and managing privacy risk across the organisation. You will act as deputy to the Director and be a key contact for complex privacy matters, including DSARs, privacy

Qualifications

• Experience leading data protection and privacy programs.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience engaging with regulators such as ICO and FCA.
• Proven ability to lead and develop a high-performing team.

Responsibilities

• Lead and optimise DSAR processes in line with statutory requirements and service standards.
• Own and develop the Data Protection and Privacy Risk Framework, including policies and processes.
• Define, monitor and report on information risk appetite and governance metrics.
• Lead, coach and develop a team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations and regulatory notifications.
• Provide oversight of third-party data protection risks and supplier compliance.
• Lead responses to privacy complaints, including ICO engagements.
• Act as a trusted adviser on complex data protection matters across the business.

Skills

UK GDPR knowledge

Data protection leadership

Regulator relationships

Stakeholder management

DSAR management

Privacy risk management

Education

CIPP/E CIPM CIPT

Job description

Are you ready to chart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking the capabilities needed for future success.This includes significantly investing in technology, streamlining the way we work and creating an environment where colleagues feel engaged, empowered and accountable; where they can show up, speak up and perform - because we believe in the difference our work makes.

At a glance:

Location: Cirencester Office

Workplace Type: Hybrid

Employment Type: Permanent

Seniority: Mid-Senior Level

About the Role

We're looking for an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring SJP maintains the highest standards of data protection compliance and privacy risk management.

Reporting to the Director of Group Data Governance, Protection and Privacy, you'll lead a team of five specialists and play a pivotal role in shaping data protection strategy, managing privacy risks, and driving compliance across the organisation. You'll also act as deputy to the Director and serve as a key point of contact for complex privacy matters.

What you'll be doing:

• Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.
• Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.
• Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.
• Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.
• Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.
• Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.
• Act as a trusted adviser on complex data protection and privacy matters across the business.
• Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.
• Significant experience in a senior Data Protection or Privacy leadership role.
• Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.
• Experience developing and implementing enterprise-wide privacy frameworks.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience managing relationships with regulators, particularly the ICO and FCA.
• Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.
• A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.
• Knowledge of international privacy regulations.
• Experience managing third-party suppliers and vendor risk.
• Background in customer-facing or client-focused environments.

What's in it for you?

Whatever stage of life you're in, our benefits are designed to provide the support, flexibility, and peace of mind you need to thrive both at work and beyond.

In addition to our discretionary annual bonus scheme, which reflects both individual and company performance, you'll benefit from a market-leading benefits package tailored to support your wellbeing, financial security, and family life.

Our benefits include:

• 28 days' annual leave plus bank holidays, with the option to purchase up to 5 additional days.
• Private Medical Insurance – company-funded cover for you and your immediate family
• Generous Pension Scheme – a non-contributory employer contribution of 10%, increasing with length of service up to 15%, plus the opportunity to increase this through salary sacrifice
• Enhanced Parental Leave – up to 26 weeks' full pay to support growing families.
• Protection Benefits – company-funded critical illness cover, income protection, and life assurance
• EV salary sacrifice scheme through Tusker

Reasonable Adjustments
We're an equalopportunities employer and want to ensure our recruitment process is accessibleand inclusive for all, if you require reasonable adjustment(s) at any stageplease let us know by emailing us at [e-mail]
Research tells usthat applicants (especially those from underrepresented groups) can be put offfrom applying for a role if they do not meet all the criteria or have been onan extended career-break.