Job Overview

This role provides advanced, autonomous expertise in delivering high‑quality, defensible data protection assessments for complex and high‑risk processing. It translates intricate regulatory and policy requirements into practical, scalable outcomes and serves as an escalation point for sensitive or ambiguous cases. Beyond individual delivery, the role enhances service consistency, mentors colleagues, and contributes to continuous improvement of assessment frameworks and operational practices—strengthening the organization’s overall data protection maturity.

Key responsibilities

• Provide strategic oversight and quality assurance for end‑to‑end RoPA documentation and complex data protection assessments (DPIA, LIA, SPA, TIA) across multiple business units
• Assess data protection risks and recommend proportionate and pragmatic mitigation measures
• Interpret complex regulatory, legal, and policy requirements and translate them into frameworks and operational processes
• Independently manage and resolve high‑risk, high‑complexity, or ambiguous processing activities, providing authoritative guidance to cross‑functional stakeholders
• Oversee and mentor junior team members, providing technical guidance, reviewing assessment outputs, and driving capability uplift
• Lead continuous improvement initiatives for assessment frameworks, templates, tooling, and guidance documentation

Key Capabilities/Experience

• Expert knowledge of core data protection & privacy principles and regulatory frameworks.
• Deep hands-on experience with data protection assessments, vendor risk assessments, data breach assessment, and DSR handling.
• Ability to articulate complex data protection & privacy positions clearly and confidently
• Experience guiding others without formal line-management dependency

Minimum Qualifications

• Over 7 years of hands-on data protection & privacy compliance experience
• Background in technology, information security, risk management, or legal
• Data protection & privacy training or certifications (CIPM, CIPP/E, CIPP/US, CIPT)
• Experience with privacy tools (preferred)