Senior Data Protection & Privacy Lead - Hybrid UK

Capital One; Nottingham; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

£5,000 external qualifications funding

Pension & performance bonus

Private medical insurance

Enhanced parental leave

Holidays 25 days + 5 days option tobuy

Job summary

Capital One UK is seeking a Senior Manager - Data Protection to join our UK Compliance team. Based in London or Nottingham, the role is hybrid with three in-office days (Tue–Thu) and two remote days, providing trusted, risk-based privacy advice to senior stakeholders.

You will translate regulatory requirements into practical, proportionate solutions and work with Product, Operations, Technology, Legal and Information Security to embed standards into transformation programmes, including DPIAs and

Qualifications

• Experience in UK financial services Compliance, Risk, Legal, or Data Protection with a privacy focus.
• Hands-on experience conducting DPIAs and LIAs under UK GDPR and ICO expectations.
• Ability to translate complex regulatory requirements into practical, proportionate solutions.
• Excellent communication and presentation skills for Board/Executive level risk discussions.

Responsibilities

• Act as a senior SME on UK GDPR and the Data Protection Act 2018, advising on privacy risks across products and journeys.
• Provide broad compliance expertise across FCA framework and Consumer Duty, ensuring customer outcomes.
• Challenge senior leaders with practical, commercially focused regulatory advice.
• Review DPIAs and LIAs to ensure appropriate use of customer data and mitigate negative outcomes.
• Embed FCA and data protection standards with Product, Operations, Tech, Legal, and Information Security.

Skills

UK GDPR knowledge

DPIAs & LIAs

Regulatory experience

Stakeholder management

Strong communication

Job description

Capital One UK is seeking a Senior Manager - Data Protection to join our UK Compliance team. Based in London or Nottingham, the role is hybrid with three in-office days (Tue–Thu) and two remote days, providing trusted, risk-based privacy advice to senior stakeholders.

You will translate regulatory requirements into practical, proportionate solutions and work with Product, Operations, Technology, Legal and Information Security to embed standards into transformation programmes, including DPIAs and