Senior Data Protection Manager

Capital One; Nottingham; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

£5,000 external qualifications funding

Pension & performance bonus

Private medical insurance

Enhanced parental leave

Holidays 25 days + 5 days option tobuy

Job summary

Capital One UK is seeking a Senior Manager - Data Protection to join our UK Compliance team. Based in London or Nottingham, the role is hybrid with three in-office days (Tue–Thu) and two remote days, providing trusted, risk-based privacy advice to senior stakeholders.

You will translate regulatory requirements into practical, proportionate solutions and work with Product, Operations, Technology, Legal and Information Security to embed standards into transformation programmes, including DPIAs and

Qualifications

• Experience in UK financial services Compliance, Risk, Legal, or Data Protection with a privacy focus.
• Hands-on experience conducting DPIAs and LIAs under UK GDPR and ICO expectations.
• Ability to translate complex regulatory requirements into practical, proportionate solutions.
• Excellent communication and presentation skills for Board/Executive level risk discussions.

Responsibilities

• Act as a senior SME on UK GDPR and the Data Protection Act 2018, advising on privacy risks across products and journeys.
• Provide broad compliance expertise across FCA framework and Consumer Duty, ensuring customer outcomes.
• Challenge senior leaders with practical, commercially focused regulatory advice.
• Review DPIAs and LIAs to ensure appropriate use of customer data and mitigate negative outcomes.
• Embed FCA and data protection standards with Product, Operations, Tech, Legal, and Information Security.

Skills

UK GDPR knowledge

DPIAs & LIAs

Regulatory experience

Stakeholder management

Strong communication

Job description

Senior Manager - Data Protection

Location: London or Nottingham

Working Pattern: 3 days in-office (Tuesday-Thursday) and 2 days remote.

Our Mission

We're on a mission to be a force for good in lending. Throughout our almost 30-year history, we've consistently been recognised as a great place to work; in 2026, Capital One was officially ranked 9th in the UK's Best Workplaces list. Hear from our team about what it's like working at Capital One UK.

About the role

This is an exciting opportunity for an experienced compliance professional with specialist expertise in data protection and privacy to join our UK Compliance team. The role provides trusted, risk-based advice to senior business stakeholders, ensuring that data protection requirements are effectively embedded alongside FCA regulatory obligations. The role will be particularly important where privacy, customer outcomes, conduct risk, Consumer Duty, technology, AI and financial services regulation intersect. You will act as a credible adviser and constructive challenger to the business, translating complex regulatory requirements into practical, proportionate and commercially focused solutions.

What you'll do

• Act as a senior subject matter expert on UK GDPR and the Data Protection Act 2018, providing authoritative advice on privacy risks across products, customer journeys, and emerging technologies like AI.
• Provide broad compliance expertise across the FCA regulatory framework, driving appropriate customer outcomes and supporting the business in demonstrating compliance with the Consumer Duty.
• Serve as a trusted advisor and constructive challenger to senior business leaders, translating complex regulatory requirements into practical, proportionate, and commercially focused solutions.
• Review and challenge DPIAs and Legitimate Interest Assessments, ensuring customer data is used appropriately to identify and address poor customer outcomes.
• Develop strong relationships across Product, Operations, Technology, Legal, and Information Security teams to seamlessly embed FCA and data protection standards into business transformation programmes.

Skills & experience

• Significant experience within a UK financial services Compliance, Risk, Legal, or Data Protection environment, with a specialist focus on privacy.
• Strong technical knowledge of UK GDPR, the Data Protection Act 2018, and ICO expectations, including hands-on experience conducting DPIAs and LIAs.
• Demonstrable experience working with the FCA regulatory framework, with the ability to apply Consumer Duty and conduct risk requirements to practical business processes.
• Proven ability to act as a strategic thinker and influential leader, confident in managing senior stakeholders and advising executives on complex, potentially contentious regulatory matters.
• Excellent communication and presentation skills, capable of simplifying complex legislation and preparing clear, succinct Board and Executive-level risk assessments.

Where and how you'd work

This is a permanent position based in either our Nottingham or London office. We embrace a hybrid approach to work. You'll spend three days a week in the office (Tuesday-Thursday), with Monday and Friday being dedicated work-from-home days. Our offices are designed to inspire and support you. At our Nottingham head office, you'll find an on-site gym, restaurant and dedicated Learning Loft. Our London office boasts a rooftop running track and coffee bar.

What’s in it for you

You will have extensive opportunities to learn and develop your career, including access to up to £5,000 in funding for external qualifications. In addition to career development, our comprehensive benefits package is designed to grow with you, ensuring your wellbeing is prioritised at every stage of your career:

• Competitive pension and performance-based bonus schemes
• Holidays: Start with 25 days of annual leave, increasing with tenure. Need more? You have the option to buy 5 additional days.
• Health: Access premium care through our private medical insurance.
• Family Support: We champion your milestones with enhanced parental leave.
• We invest in the growth of our people alongside our business.

A full list of our benefits is available here.

What you should know about how we recruit

We pride ourselves on hiring the best people, not the same people.

Building diverse and inclusive teams is the right thing to do and the smart thing to do.

We want to work with top talent: whoever you are, whatever you look like, wherever you come from.

We know it's about what you do, not just what you say.

That's why we make our recruitment process fair and accessible.

We value diversity, inclusion and belonging at our core.

We empower our associates to do great work by creating an inclusive culture- one that values diverse perspectives, fosters collaboration and encourages innovative ideas and a place where associates of all backgrounds can thrive by bringing their most authentic selves to work.

We call this our Culture of Belonging, and it rests at the heart of our business.

Our associate-led Business Resource Groups were created to help support our diverse population and include over 10 groups across our offices.

Because each Business Resource Group is as unique as the population it serves, they offer a range of activities, networking opportunities, special events and learning programmes to associates.

Capital One is committed to diversity in the workplace.

If you require a reasonable adjustment, please contact [e-mail]

All information will be kept confidential and will only be used for the purpose of applying a reasonable adjustment.

For technical support or questions about Capital One's recruiting process, please send an email to [e-mail]