Data Protection And Privacy Manager

Job Title: Data Protection Manager (Fixed Term Contract until October 2027)

Responsibilities and Accountabilities

• Provide day to day support to the Data Protection Officer in fulfilling the Data Protection Strategy
• Work with Legal to manage supplier contracts and update with data protection clauses
• Manage data subject access requests and e-discovery requests in a timely manner
• Conduct a data mapping exercise to ascertain where all our personal data resides
• Build and manage effective relationships with key stakeholders across the business, providing expert data protection guidance and challenge to drive a culture of compliance and continuous improvement
• Work together with the DPO on maintaining group-wide data protection policies, guidelines, processes
• Report on data protection issues to the DPO in a timely manner
• Support the DPO in all internal and external audits
• Ensure management of the data protection mailboxes and escalate to the DPO accordingly
• Maintain the Record of processing activities register and update accordingly
• Support the training and awareness activities on data protection for the group
• Perform and manage data protection impact assessments on new and updated initiatives
• Run monthly MI reports on all data protection activities
• Attend various forums where data protection input is required
• Input into data breach response process
• Take ownership and maintain all key logs such as the DSAR, data incidents, DPIA, supplier logs
• Check data protection controls are applied and embedded properly in projects
• Ensure contracts/agreements meet data protection requirements as and when required
• Handle responses to data protection emergencies and cascade accordingly to the DPO and the relevant forums

What you will do

• Deputise for the Group DPO: Take charge of data protection compliance for customer and employee data.
• Lead Privacy Initiatives: Spearhead large-scale, cross-functional privacy improvement projects.
• Assess DPIAs/PIAs: Provide pragmatic privacy advice on innovative business projects, including algorithms, GenAI, automation, and personalisation.
• Directly line manage the Data Protection Advisors and Data Protection Administrator, overseeing team performance, workload, and the effectiveness of the information rights requests process.
• AI Project Advisory: Advise on privacy risks associated with new GenAI and AI-related projects.
• Incident Management: Manage medium and large-scale personal data incidents, including investigation, response, notification assessment, and remediation.
• Privacy Program Support: Assist in managing the data privacy program and compliance framework.
• Training and Upskilling: Support the development and training of the Data Protection team.
• Rights Requests Supervision: Advise on the accurate and timely processing of consumer and employee individual rights requests.
• Complaint Resolution: Manage escalated customer complaints and those received via the ICO, overseeing investigations, advising on responses, and drafting correspondence to ensure timely and accurate resolution.
• Policy Development: Draft internal policies, procedures, and guidance materials, and maintain compliance documentation.
• Regulatory Response: Lead and manage all ICO correspondence, including regulatory reviews, investigations, and dawn raids (e.g. cookie compliance reviews), ensuring responses are timely, accurate, and appropriately evidenced; escalating to the Group DPO where required.
• Compliance Audits: Lead and conduct data protection departmental compliance audits.

Qualifications and Key Skills

• Extensive experience within Data Protection and Privacy (EU & UK)
• Three or more years of experience in data protection compliance or related field
• Expertise in data protection laws and practices, including deep understanding of GDPR
• Experience in a legal, audit, or risk management role
• Strong project management skills
• Ability to work effectively under pressure and to manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail
• Proven leadership experience
• CIPM / CIPP/E / Practitioner in DP would be advantageous

Software and Technology Skills

• Proficient use of basic software solutions
• Understanding of technical requirements for security and privacy principles

Benefits

• Hybrid working (3 days in the office at a minimum)
• 24 days holiday (+ 8 bank holidays)
• Annual bonus scheme
• Enhanced maternity and adoption leave
• Company pension with up to 8% N Brown contribution
• Mental Health support both internally and externally, including access to our wellbeing champions and counselling services
• A range of financial wellbeing support
• Stream – a financial wellbeing tool that helps you track your pay, access earnings early and manage your money with confidence
• Colleague discount across all N Brown brands
• Onsite café with subsidised rates and local restaurant discounts!
• Life Assurance and Private Medical Insurance
• Paid volunteer time – all our colleagues can take a full day paid to volunteer for a charity of their choice

Equal Employment Opportunity Statement

We’re an equal opportunity employer and value diversity. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

#J-18808-Ljbffr…