Senior Global Data Protection Specialist

vavemga; Greater London; On-site; GBP 75,000 - 120,000; Full time

Job summary

Canopius Group is seeking a Senior Global Data Protection Specialist to support the Group Head of Compliance/Data Protection Officer and ensure robust privacy practices across jurisdictions. Hybrid London role with broad exposure to risk-based advisory and governance activities.

You will help embed data protection controls, assist with DPIAs, ROPA, training, and cross-functional collaboration with Legal, Procurement and IT to strengthen the Group’s privacy framework and regulatory compliance.

Qualifications

• Extensive practical experience in a data protection role with a focus on privacy frameworks.
• Ability to translate regulatory requirements into practical guidance for business.
• Experience delivering training and guidance to stakeholders at different levels.

Responsibilities

• Act as a key contributor within the Group Data Protection Function, delivering risk-based data protection guidance.
• Support the Data Protection Officer with compliance monitoring and improvement initiatives.
• Maintain data protection policies, procedures and accountability frameworks, including data retention and ROPA.
• Conduct Data Protection Impact Assessments (DPIAs) and identify mitigating actions.
• Handle data subject rights requests and data protection complaints in line with regulatory requirements.

Skills

Technical Expertise

Judgement & Risk Awareness

Stakeholder Management

Education

CIPP/E

CIPM

Tools

OneTrust Privacy Management System

Job description

Senior Global Data Protection Specialist

London, United Kingdom (Hybrid)

Job Description

The Role
This role supports the Group Head of Compliance/Data Protection Officer and Group Data Protection Manager in delivering and maintaining the Group's Data Framework across all jurisdictions. Working closely across the business, you will provide pragmatic, risk ‑ based advice and help embed consistent privacy practices and controls throughout the Canopius Group.

Opportunities Available: As part of the continued development of the team, we have 2 exciting opportunities available. A permanent role, newly created to strengthen the team's capability and support future growth. A 12 month Fixed Term Contract, providing maternity cover. The responsibilities, skills and experience requirements are the same for both positions. Applicants will be able to indicate their preference for either the permanent role, the fixed term opportunity, or both!

Role Responsibilities will include

• Act as a key contributor within the Group Data Protection Function, supporting the delivery of practical and risk ‑ based data protection guidance, working within established Group frameworks and policies on new products, systems, outsourcing arrangements and material business change initiatives.
• Support the Data Protection Officer (DPO) with compliance monitoring activities, in line with applicable data protection legislation and Group policies, identifying areas for improvement or escalation.
• Assist with maintaining data protection policies, procedures and accountability frameworks, including data retention.
• Assist with maintaining Group Records of Processing Activities (ROPA) and supporting ongoing data governance initiatives.
• Work with Canopius stakeholders to conduct Data Protection Impact Assessments (DPIAs), identifying risks and contributing to recommended mitigating actions, with escalation to the Data Protection Manager and/or DPO where appropriate.
• Handle data subject rights requests and data protection complaints, ensuring timely and compliant responses in accordance with applicable regulatory requirements and internal standards.
• Support the DPO and Group Data Protection Manager with the investigation of personal data breaches, including risk assessment, root cause analysis, internal escalation, regulatory notification activities, and post ‑ incident remediation actions, in line with established processes and with escalation where appropriate.
• Contribute to the design and delivery of privacy training and awareness activities across Canopius.
• Collaborate with regional compliance teams and business stakeholders to support the consistent implementation of Group privacy standards.
• Support the implementation of data transfer mechanisms and the delivery of Transfer Risk Assessments (TRAs) as required, escalating complex issues where appropriate.
• Support the review of vendor contracts, Delegated Claims Authority (DCA) agreements and other third ‑ party data sharing arrangements, working closely with Procurement and Legal and contributing to advice on data protection clauses in line with regulatory requirements and the Group’s risk appetite.
• Maintain awareness of relevant regulatory developments and support associated implementation activities where required.
• Provide informal guidance to junior compliance colleagues on data protection issues.
• Continue to develop subject matter expertise through continuing professional education, training courses, seminars and conferences.
• And other ad hoc duties as required.

Skills

• Technical Expertise – Demonstrates strong specialist knowledge in data protection and privacy, applying this effectively to complex and non ‑ standard scenarios.
• Judgement and Risk Awareness – Exercises sound judgement, providing proportionate, risk ‑ based advice aligned to the Group’s risk appetite.
• Stakeholder Management and Influence – Builds effective working relationships and influences stakeholders through clear, practical and credible advice.

Further Relevant Skills and Experiences

• Extensive practical experience in a data protection role, supported by a recognised data protection qualification (e.g. CIPP/E, CIPM or equivalent).
• Proven ability to translate legal and regulatory requirements into practical, business ‑ focused guidance, working collaboratively with Legal, Procurement, Risk and operational teams.
• Experience delivering training and guidance to stakeholders at different levels, translating complex requirements into clear and accessible advice.
• Strong written and verbal communication skills, with the ability to engage effectively with senior stakeholders and non ‑ technical audiences.
• Experience within insurance, reinsurance or another regulated industry is advantageous.
• Experience using privacy management platforms, with knowledge of the One Trust Privacy Management System preferred.

Job Info

• Job Identification 783
• Job Category Risk, Internal Audit & Governance
• Posting Date 08/11/2026, 10:05 AM
• Job Schedule Full time
• Locations Floor 29, London, EC2N 4BQ, GB (Hybrid)