Senior Data Protection Specialist

Colt Technology Services; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Relaxed dress code

Two volunteering days per year

39-hour working week with additional休

Job summary

Colt Technology Services is seeking a Senior Data Protection Specialist in London, hybrid setup. The role focuses on UK GDPR, EU GDPR and international privacy compliance, supporting the global Data Protection Programme and AI governance.

You will lead DPIAs, TIAs and privacy-by-design reviews, drafting and negotiating DPAs, and advising a wide range of stakeholders on privacy requirements. Strong cross-border expertise and English fluency are essential.

Qualifications

• 7–10 years of professional experience in data protection and regulatory compliance.
• Strong practical knowledge of UK GDPR, EU GDPR and international transfers.
• Proven experience leading DPIAs, TIAs and privacy-by-design reviews.
• Excellent drafting, negotiation and communication skills.
• Fluent written and spoken English; additional European language desirable.
• A legal qualification or equivalent senior privacy experience; CIPP/E, CIPM, AIGP desirable.

Responsibilities

• Provide expert, regulator-defensible advice on UK GDPR, EU GDPR and international privacy laws.
• Lead DPIAs, TIAs, privacy risk assessments and privacy-by-design reviews.
• Draft, review and negotiate DPAs, international transfer mechanisms and governance documents.
• Advise stakeholders across Product, Tech, Security, HR, Sales and Legal on privacy requirements.
• Support AI tools, automation, digital transformation and privacy governance.
• Lead and manage vendor privacy assessments.
• Support data protection process digitalisation and tool adoption.
• Assist with data incident investigations, breach assessments and regulatory documentation.

Skills

Regulatory compliance

Data protection planning

Data protection concepts

GDPR knowledge

Education

Bachelor's or Master in Law

Job description

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.

Short Description

Function: General Counsel

Reports to: Global Data Protection Director

Set up: hybrid

Location: London, UK

Why we need this role

The Senior Data Protection Specialist provides senior-level legal and practical advice on UK GDPR, EU GDPR and international privacy requirements, including Colt's Binding Corporate Rules. The role supports the delivery of the global Data Protection Programme, AI and digitalisation initiatives, regulatory projects and privacy-by-design across the business.

The role reports directly to the Global Data Protection Director. It is a senior individual-contributor role with responsibility for leading assigned matters and delivering high-quality work. The successful candidate will be comfortable working in an environment characterised by evolving business priorities and a broad variety of data protection matters across multiple jurisdictions. The role requires close alignment with the team, the Director and the global Data Protection framework, while contributing proactively to the overall success of the function.

What you will do

• Provide expert, pragmatic and regulator-defensible advice on UK GDPR, EU GDPR, and international privacy laws.
• Lead and deliver DPIAs, TIAs, privacy risk assessments and privacy-by-design reviews for complex projects.
• Draft, review and negotiate data processing agreements, international transfer mechanisms, and related governance documents.
• Advise Product, Technology, Security, Procurement, HR, Sales and Legal stakeholders on privacy requirements and practical solutions.
• Support AI tools, automation, digital transformation and customer-facing AI initiatives from a privacy and governance perspective.
• Lead and manage vendor privacy assessments.
• Support the digitalisation of Data Protection processes and tools.
• Support data incident investigations, breach assessments, remediation and preparation of regulatory documentation.
• Support audits, regulatory projects, training and continuous improvement of policies, procedures, templates and controls.
• Developing and delivering training programs to educate employees about data protection principles, policies, and best practices.
• Provide Data Protection advice and governance oversight on Data Subject Access Requests (DSARs), supporting the business in meeting its obligations while maintaining appropriate accountability within the relevant functions.
• Monitor relevant regulatory developments and recommend appropriate implementation actions.
• Strong team player, with a collaborative, supportive and constructive working style with the team.

What we look for

• 7-10 years of relevant professional experience in data protection, privacy law or regulatory compliance, including work in an international environment.
• Strong practical knowledge of UK GDPR, EU GDPR, international transfers and complex multi-jurisdictional privacy matters.
• Proven experience leading DPIAs, TIAs, privacy-by-design reviews, vendor assessments and complex stakeholder advice.
• Experience with technology, digitalisation, AI governance, product privacy or processor services.
• Excellent drafting, analysis, negotiation, communication and problem-solving skills.
• Fluent written and spoken English. An additional European language is desirable.
• A legal qualification or equivalent senior privacy experience. CIPP/E, CIPM, AIGP or an equivalent certification is strongly desirable.
• Strong team player, with a collaborative, supportive and constructive working style.
• High level of personal accountability, ownership and follow-through on assigned workstreams.
• Ability to proactively drive progress, coordinate stakeholders and move matters forward without requiring constant day-to-day direction.
• Ability to prepare clear, practical and well-structured recommendations for decision-making.
• Ability to manage competing priorities, tight deadlines and significant workloads while maintaining accuracy and professional standards.
• Strong communication skills, including the ability to engage effectively with senior stakeholders.
• Practical problem-solving mindset, with the ability to propose workable solutions rather than simply identify issues.
• Strong drafting skills and ability to produce clear, regulator-ready documentation, recommendations, records and governance materials.

Skills

Regulatory Compliance

Data Protection Strategic Planning

Data Protection Concepts

General Data Protection Regulation (GDPR)

Education

A bachelor’s or master’s degree in law or a relevant field

What we offer:

Colt is a growing business that is investing in its people. We offer skill development, learning pathways and accreditation to help our people perform at their best, regardless of role and location. The company supports diversity and inclusion in the workplace and has signed Diversity Charter.

In addition to offering competitive salaries and incentive plans, a range of benefits and local rewards packages are offered to staff. Colt recognises the importance of a work life balance.

Some benefit examples are:

• Relaxed dress code
• Two days annually to spend on volunteering opportunities
• 39 hours working week and additional days off as per Colt own collective bargaining agreement
• Benefit package that includes life insurance, private health insurance and pension plan. In addition flexible benefits scheme
• Lunch vouchers or childcare vouchers
• Access to a virtual business school for on-going learning
• Business mentoring
• International environment with employees from more than 35 different nationalities

We strongly encourage candidates of all different backgrounds and identities to apply. We are committed to making Colt an inclusive and supportive workplace