Senior Data Protection Manager

• Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.
• Significant experience in a senior Data Protection or Privacy leadership role.
• Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.
• Experience developing and implementing enterprise-wide privacy frameworks.
• Strong knowledge of the UK GDPR and Data Protection Act 2018.
• Experience managing relationships with regulators, particularly the ICO and FCA.
• Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.
• A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.

• Knowledge of international privacy regulations.
• Experience managing third-party suppliers and vendor risk.
• Change management experience.
• Background in customer-facing or client-focused environments.

We're looking for an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring SJP maintains the highest standards of data protection compliance and privacy risk management.

Reporting to the Director of Group Data Governance, Protection and Privacy, you'll lead a team of five specialists and play a pivotal role in shaping data protection strategy, managing privacy risks, and driving compliance across the organisation. You'll also act as deputy to the Director and serve as a key point of contact for complex privacy matters.

• Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.
• Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.
• Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.
• Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.
• Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.
• Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.
• Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.
• Act as a trusted adviser on complex data protection and privacy matters across the business.