Job Overview

This role provides advanced, autonomous expertise in delivering highquality, defensible data protection assessments for complex and highrisk processing. It translates intricate regulatory and policy requirements into practical, scalable outcomes and serves as an escalation point for sensitive or ambiguous cases. Beyond individual delivery, the role enhances service consistency, mentors colleagues, and contributes to continuous improvement of assessment frameworks and operational practicesstrengthening the organizations overall data protection maturity.

Key responsibilities

• Provide strategic oversight and quality assurance for endtoend RoPA documentation and complex data protection assessments (DPIA, LIA, SPA, TIA) across multiple business units
• Assess data protection risks and recommend proportionate and pragmatic mitigation measures
• Interpret complex regulatory, legal, and policy requirements and translate them into frameworks and operational processes
• Independently manage and resolve highrisk, highcomplexity, or ambiguous processing activities, providing authoritative guidance to crossfunctional stakeholders
• Oversee and mentor junior team members, providing technical guidance, reviewing assessment outputs, and driving capability uplift
• Lead continuous improvement initiatives for assessment frameworks, templates, tooling, and guidance documentation

Key Capabilities/Experience

• Expert knowledge of core data protection & privacy principles and regulatory frameworks.
• Deep hands-on experience with data protection assessments, vendor risk assessments, data breach assessment, and DSR handling.
• Ability to articulate complex data protection & privacy positions clearly and confidently
• Experience guiding others without formal line-management dependency

Minimum Qualifications

• Over 7 years of hands-on data protection & privacy compliance experience
• Background in technology, information security, risk management, or legal
• Data protection & privacy training or certifications (CIPM, CIPP/E, CIPP/US, CIPT)

Experience with privacy tools (preferred)