Senior Global Data Protection Specialist

Canopius; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Canopius in London is seeking a Senior Global Data Protection Specialist to support the Group Head of Compliance/Data Protection Officer and embed privacy practices across jurisdictions. Hybrid work arrangements in London are available, with a role created to strengthen the privacy framework and responses to data protection matters across the Canopius Group.

Responsibilities include DPIAs, policy maintenance, handling subject rights, incident response support, and delivering privacy training to

Qualifications

• Extensive practical experience in a data protection role, supported by a recognised data protection qualification (e.g. CIPP/E, CIPM or equivalent).
• Ability to translate legal/regulatory requirements into practical guidance for the business.

Responsibilities

• Support the DPO with compliance monitoring and Group data protection governance.
• Maintain DPIAs and data retention policies; support data governance initiatives.
• Handle data subject rights requests and data protection complaints with timely, compliant responses.
• Contribute to privacy training and awareness across Canopius.
• Review data sharing arrangements and vendor contracts for compliance.

Skills

Data protection expertise

Risk-based advice

Stakeholder management

Training delivery

Education

CIPP/E or CIPM

Tools

OneTrust Privacy Management System

Job description

Senior Global Data Protection Specialist

London, United Kingdom (Hybrid)

Job Description

The Role This role supports the Group Head of Compliance/Data Protection Officer and Group Data Protection Manager in delivering and maintaining the Group's Data Framework across all jurisdictions. Working closely across the business, you will provide pragmatic, risk-based advice and help embed consistent privacy practices and controls throughout the Canopius Group.

Opportunities Available: As part of the continued development of the team, we have 2 exciting opportunities available. A permanent role, newly created to strengthen the team's capability and support future growth. A 12 month Fixed Term Contract, providing maternity cover. The responsibilities, skills and experience requirements are the same for both positions. Applicants will be able to indicate their preference for either the permanent role, the fixed term opportunity, or both!

Role Responsibilities will include

• Act as a key contributor within the Group Data Protection Function, supporting the delivery of practical and risk ‑ based data protection guidance, working within established Group frameworks and policies on new products, systems, outsourcing arrangements and material business change initiatives.
• Support the Data Protection Officer (DPO) with compliance monitoring activities, in line with applicable data protection legislation and Group policies, identifying areas for improvement or escalation.
• Assist with maintaining data protection policies, procedures and accountability frameworks, including data retention.
• Assist with maintaining Group Records of Processing Activities (ROPA) and supporting ongoing data governance initiatives.
• Work with Canopius stakeholders to conduct Data Protection Impact Assessments (DPIAs), identifying risks and contributing to recommended mitigating actions, with escalation to the Data Protection Manager and/or DPO where appropriate.
• Handle data subject rights requests and data protection complaints, ensuring timely and compliant responses in accordance with applicable regulatory requirements and internal standards.
• Support the DPO and Group Data Protection Manager with the investigation of personal data breaches, including risk assessment, root cause analysis, internal escalation, regulatory notification activities, and post ‑ incident remediation actions, in line with established processes and with escalation where appropriate.
• Contribute to the design and delivery of privacy training and awareness activities across Canopius.
• Collaborate with regional compliance teams and business stakeholders to support the consistent implementation of Group privacy standards.
• Support the implementation of data transfer mechanisms and the delivery of Transfer Risk Assessments (TRAs) as required, escalating complex issues where appropriate.
• Support the review of vendor contracts, Delegated Claims Authority (DCA) agreements and other third ‑ party data sharing arrangements, working closely with Procurement and Legal and contributing to advice on data protection clauses in line with regulatory requirements and the Group’s risk appetite
• Maintain awareness of relevant regulatory developments and support associated implementation activities where required.
• Provide informal guidance to junior compliance colleagues on data protection issues.
• Continue to develop subject matter expertise through continuing professional education, training courses, seminars and conferences.
• And other ad hoc duties as required.

Skills

• Technical Expertise – Demonstrates strong specialist knowledge in data protection and privacy, applying this effectively to complex and non ‑ standard scenarios.
• Judgement and Risk Awareness – Exercises sound judgement, providing proportionate, risk ‑ based advice aligned to the Group’s risk appetite.
• Stakeholder Management and Influence – Builds effective working relationships and influences stakeholders through clear, practical and credible advice.

Further Relevant Skills and Experiences

• Extensive practical experience in a data protection role, supported by a recognised data protection qualification (e.g. CIPP/E, CIPM or equivalent).
• Proven ability to translate legal and regulatory requirements into practical, business ‑ focused guidance, working collaboratively with Legal, Procurement, Risk and operational teams.
• Experience delivering training and guidance to stakeholders at different levels, translating complex requirements into clear and accessible advice.
• Strong written and verbal communication skills, with the ability to engage effectively with senior stakeholders and non ‑ technical audiences.
• Experience within insurance, reinsurance or another regulated industry is advantageous.
• Experience using privacy management platforms, with knowledge of the One Trust Privacy Management System preferred.

Job Info

• Job Identification 783
• Job Category Risk, Internal Audit & Governance
• Posting Date 08/11/2026, 10:05 AM
• Job Schedule Full time
• Locations Floor 29, London, EC2N 4BQ, GB (Hybrid)