London, England, United Kingdom Hybrid / WFH Options
Bridewell Consulting Limited
applying expert domain knowledge across a number of delivery scenarios, including but not limited to, data mapping, responding to data subject requests, managing personal data breaches, undertaking Data Protection ImpactAssessments, undertaking privacy audits and gap analysis and conducting contract reviews. Practical experience of developing, maintaining and implementing Data Privacy Frameworks in a variety of organisations including during … times of large-scale transformation. Practical experience of applying a range of risk management approaches, conducting risk assessments and being able to articulate risk effectively. Practical experience of providing independent support and advice on a wide variety of privacy issues. Experience in operating in the role of Data Protection Officer, including liaising with regulators, such as the Information Commissioners More ❯
change methodologies (e.g., Prosci, ADKAR, Kotter) to drive successful business transitions. Partner with senior leaders and business units to ensure that change initiatives align with strategic goals. Conduct change impactassessments and develop strategies for stakeholder engagement, training, and communication. Promote a culture of continuous improvement, embedding best practices in change management across the organization. Lead the governance More ❯
London, England, United Kingdom Hybrid / WFH Options
Bridewell Consulting Limited
applying expert domain knowledge across a number of delivery scenarios, including but not limited to, data mapping, responding to data subject requests, managing personal data breaches, undertaking Data Protection ImpactAssessments, undertaking privacy audits and gap analysis and conducting contract reviews. Practical experience of developing, maintaining and implementing Data Privacy Frameworks in a variety of organisations including during … times of large-scale transformation. Practical experience of applying a range of risk management approaches, conducting risk assessments and being able to articulate risk effectively. Practical experience of providing independent support and advice on a wide variety of privacy issues. Experience in operating in the role of Data Protection Officer, including liaising with regulators, such as the Information Commissioners More ❯
London, England, United Kingdom Hybrid / WFH Options
Bridewell Consulting Limited
Bridewell’s clients. Activities may include but not limited to: Implementing Data Protection by Design and Default processes; Data Breach investigation, assessment and notification; Implementing and conducting Data Protection ImpactAssessments; Data protection and privacy considerations in supply chains; Data mapping; Implementation and handling of data subject rights processes; Producing Privacy Notices and Polices; Provision of advice on … applying expert domain knowledge across a number of delivery scenarios, including but not limited to, data mapping, responding to data subject requests, managing personal data breaches, undertaking Data Protection ImpactAssessments, undertaking privacy audits and gap analysis and conducting contract reviews. Practical experience of developing, maintaining and implementing Data Privacy Frameworks in a variety of organisations including during … times of large-scale transformation. Practical experience of applying a range of risk management approaches, conducting risk assessments and being able to articulate risk effectively. Practical experience of providing independent support and advice on a wide variety of privacy issues. Experience in operating in the role of Data Protection Officer, including liaising with regulators, such as the Information Commissioners More ❯
and forward-thinking environment. The role combines risk assessment, advisory, and data governance with a focus on privacy and regulatory compliance. Function description Risk assessment & governance Conduct Data Protection ImpactAssessments (DPIAs) in various contexts (projects, outsourcing, system changes) Identify privacy-related risks and propose appropriate mitigation measures Structure and report risks according to internal standards and best More ❯
London, England, United Kingdom Hybrid / WFH Options
Close Brothers Asset Finance
and deliver training to educate colleagues on data protection procedures to ensure compliance with UK-GDPR and other relevant regulations. Support the DPO and local businesses with data protection impactassessments (DPIAs) and audits to ensure compliance with local data privacy laws. Establish and maintain a strong partnership with stakeholders across the three Lines of Defence, key business … Up to date knowledge and understanding of Data Protection legislation and regulatory requirements. Proven record of successfully selecting and implementing appropriate privacy controls. In-depth knowledge of completing Privacy Impact Assessments. Experience of responding to Subject Access Requests. Strong ability to use independent judgment and discretion when making recommendations. Strong change and project management skills, including the ability to More ❯
with a focus on data privacy (e.g., GDPR), accessibility, and emerging AI legislation. Maintain and update the company's data processing registry and provide legal input on data protection impactassessments (DPIAs). Advise on legal inquiries from clients and other stakeholders, particularly regarding SaaS-specific legal topics. Conduct continuous legal watch to track changes in relevant legislation … US We believe corporations can be a force for good-and at Optimy, we make that vision a reality. Our mission is to empower corporations to maximize their positive impact while minimizing their operational costs. The Optimy platform is the most configurable solution for managing grants, volunteering, donations, and sponsorships. We help over 350 forward-thinking customers in More ❯
London, England, United Kingdom Hybrid / WFH Options
MUFG
speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. Mitsubishi UFJ Financial Group (MUFG) is one of the world’s leading financial groups. Headquartered in Tokyo and with approximately 350 years of history, MUFG has a … be both non-IT (including but not limited to creation of a new procedure or standard or new control(s); Redesign of a business process; Organizational change management; Regulatory impactassessments) and IT related (including but not limited to creation of or enhancements/revisions to an application, creating a database, or system migration). To manage un More ❯
London, England, United Kingdom Hybrid / WFH Options
Aztec
NIST, ISO. Demonstrable extensive relevant experience of technology and change/operational risk in either a 1LoD or 2LoD capacity (2LoD preferable). Experience in scenario analysis and resilience impactassessments would be advantageous. Core skills and competencies A strong working knowledge of Microsoft products including Excel and Word, strong analytical skills and ability to provide risk intelligence More ❯
Southampton, England, United Kingdom Hybrid / WFH Options
Aztec
NIST, ISO. Demonstrable extensive relevant experience of technology and change/operational risk in either a 1LoD or 2LoD capacity (2LoD preferable). Experience in scenario analysis and resilience impactassessments would be advantageous. Core skills and competencies A strong working knowledge of Microsoft products including Excel and Word, strong analytical skills and ability to provide risk intelligence More ❯
London, England, United Kingdom Hybrid / WFH Options
Channel 4
and design through technical delivery to implementation. Experience in analysing usability and workflow efficiencies and making recommendations for improvements. Experience in developing business cases, process modelling (e.g., BPMN), and impact assessments. Highly organised and analytical with excellent attention to detail. Strong communication skills, with the ability to present ideas verbally and in writing. Proven stakeholder management skills, with the More ❯
London, England, United Kingdom Hybrid / WFH Options
DXC Technology
objectives using a combination of the company’s standardized and customized services Ensure compliance with data protection regulations and standards, including GDPR, CCPA, and other relevant laws Conduct privacy impactassessments (PIAs) and data protection impactassessments (DPIAs) Develop and implement data privacy and protection policies and procedures Monitor and audit data privacy practices to ensure More ❯
regulatory standards of the financial sector. Responsibilities: Strategic Management and Security Operations Develop, implement, and maintain information security policies, standards, and procedures. Lead the organization's cybersecurity strategy, risk assessments, and security roadmap. Manage information security projects and initiatives across IT and business units. Collaborate with senior leadership to align security goals with business objectives. Lead risk assessments … regulatory and legal security requirements (e.g., ISO 27001, NIST, HIPAA, GDPR, SOX, etc.). Ensure compliance with applicable data protection laws (e.g., GDPR, CCPA, GLBA). Guide Data Protection ImpactAssessments (DPIAs) for high-risk financial data processing activities. Work closely with Legal, Risk, and Compliance to monitor data handling practices across business units. Perform regular risk assessmentsMore ❯
assessments. Maintain a clear and up-to-date sub-processor list and lead on third-party risk management. Act as primary contact for external audits and third-party security assessments (e.g. via Vanta). Drive awareness and promote best practices across the team around security, compliance, and data handling. Secure Tooling and IT Ops Oversight Guide secure configuration and … of GDPR, with experience supporting or overseeing data protection practices. Hands-on experience with security tooling and SaaS security systems. Confident in managing compliance audits, access reviews, internal risk assessments and policy updates. Comfortable owning security strategy and technical documentation. Excellent project and stakeholder management skills - especially across tech, people and ops. Able to communicate clearly with both technical … management within payments, or financial services is a bonus. Experience acting as a Data Protection Officer (DPO) or supporting DPO responsibilities is a plus - especially around managing DSARs, privacy impactassessments, and data governance. Extra points if you have experience in data protection for international markets e.g. AU, NZ Degree (or equivalent experience) in a relevant field (computer More ❯
London, England, United Kingdom Hybrid / WFH Options
Close Brothers Group
and deliver training to educate colleagues on data protection procedures to ensure compliance with UK-GDPR and other relevant regulations. Support the DPO and local businesses with data protection impactassessments (DPIAs) and audits to ensure compliance with local data privacy laws. Establish and maintain a strong partnership with stakeholders across the three Lines of Defence, key business … Up to date knowledge and understanding of Data Protection legislation and regulatory requirements. Proven record of successfully selecting and implementing appropriate privacy controls. In-depth knowledge of completing Privacy Impact Assessments. Experience of responding to Subject Access Requests. Strong ability to use independent judgment and discretion when making recommendations. Strong change and project management skills, including the ability to More ❯
Portsmouth, Hampshire, United Kingdom Hybrid / WFH Options
Experis
design, configuration, and support of the business processes in SAP. Leads relevant Changes/Transport approval as part of the SAP Transport Management process. Leads in the review and impact assessment of all project/change requests to ensure business requirements are assessed against current Neptune (SAP) template and SAP Standard Ensures all Business Processes, Functional specification, technical specifications … with SAP and relevant third parties to resolve software issues. Lead the SAP P&SC team on all SAP releases, upgrades, enhancements/new functionality and perform application research, assessments and make recommendations. When required work with the Solution Leads, Functional or Support Analysts team to perform break/fix analysis and recommend solutions for incidents in SAP P More ❯
London, England, United Kingdom Hybrid / WFH Options
paynt
and access controls. Manage data subject access requests (DSARs), ensuring timely and lawful responses to individuals exercising their rights under UK data protection laws. Conduct and oversee Data Protection ImpactAssessments (DPIAs) for new or high-risk data processing activities, ensuring mitigation of any risks to individuals’ data rights. Maintain up-to-date records of data processing activities More ❯
South East London, London, United Kingdom Hybrid / WFH Options
Greater London Authority
governance related legislation; contribute to the development of training slides with current IG trend, issues Provide advice and support to policy and project leads, sometimes carrying out data protection impactassessments where personal data is processed highlighting areas for potential high privacy risk and advising on appropriate mitigation, ensure data sharing agreements are in place where necessary. Providing More ❯
London, England, United Kingdom Hybrid / WFH Options
Greater London Authority (GLA)
governance related legislation; contribute to the development of training slides with current IG trend, issues Provide advice and support to policy and project leads, sometimes carrying out data protection impactassessments where personal data is processed – highlighting areas for potential high privacy risk and advising on appropriate mitigation, ensure data sharing agreements are in place where necessary. Providing More ❯
Westminster Abbey, England, United Kingdom Hybrid / WFH Options
Greater London Authority (GLA)
governance related legislation; contribute to the development of training slides with current IG trend, issues Provide advice and support to policy and project leads, sometimes carrying out data protection impactassessments where personal data is processed – highlighting areas for potential high privacy risk and advising on appropriate mitigation, ensure data sharing agreements are in place where necessary. Providing More ❯
London, England, United Kingdom Hybrid / WFH Options
MetaCompliance
clear, progressive vision to the business, rooted in deep industry insight that inspires innovation and excellence. Our strengthened leadership team brings deep expertise in technology, commercial growth, and high-impact scalability. We’re building a world-class technology function grounded in modern engineering practices, continuous delivery and leveraging AI innovation, coupled with a game-changing product roadmap. How we … cloud-based systems—someone who thrives in a high-growth SaaS environment where speed, uptime, and data quality are paramount. This is a critical role where you'll directly impact the experience of thousands of users by ensuring our Azure SQL and Microsoft Fabric-based data lake environments are running at peak efficiency. You’ll join a highly collaborative … response by performing root cause analysis, collaborating with cross-functional teams, and documenting post-mortems to drive continuous improvement and prevention. Establish governance processes that manage schema evolution through impact assessment, backward compatibility, versioned documentation, and rollback strategies to ensure safe, controlled releases across multiple environments. Define and implement data lifecycle policies, including retention, purging, and archival strategies aligned More ❯
Glasgow, Scotland, United Kingdom Hybrid / WFH Options
Serco
business systems. Business Analysis Gather, analyse, and document business requirements from stakeholders. Identify gaps in current processes and propose efficient, scalable solutions. Develop detailed process maps, business cases, and impact assessments. Translate business needs into functional and non-functional specifications for technical teams. Collaborate with stakeholders to define deliverables. Act as IT Project Lead for small-scale IT projects More ❯
project specifications Work closely with colleagues to ensure software solutions meet specified quality and acceptance criteria Lead the creation of acceptance criteria alongside developers, analysts and product owners Perform impact assessment on proposed changes to manage test issues and risk Drive continuous improvement in all areas of the STLC and work collaboratively with Development and Test Leads to align More ❯
of AI products. Ensure that AI model behaviour in the firm's AI products is continuously monitored for any anomalies and/or potential security breaches. Conduct regular risk assessments and vulnerability analyses to identify potential security weaknesses in AI products and their environment. Define, develop, and maintain security policies, procedures, and standards specific to the firm's AI … or activities related to AI products, such as responding to queries or requests from external parties or auditors pertaining to AI products. Collaborate with legal teams to assess the impact of the AI product on client confidentiality, data protection, and professional responsibility. AI Risk Assessments and Review Establish repeatable processes for security risk assessments and security assessments for any new AI products or new use cases existing products before they go to market, including bias detection and accountability. Perform security risk assessments for new AI products before implementation, ensuring that all risks are recorded and tracked on an ongoing basis. Review security assessments for new use cases for existing AI products before going to More ❯
Ripponden, Yorkshire, United Kingdom Hybrid / WFH Options
JLA Limited
including the Republic of Ireland and The Netherlands. Ensure compliance with data protection laws (eg GDPR, PECR) and internal privacy standards Provide expert advice and guidance on data protection impactassessments (DPIAs) and risk management Conduct regular audits to monitor compliance and address potential privacy issues Deliver training and awareness programs to employees on data protection best practices … necessary Act as a point of contact for data subjects regarding privacy concerns and data subject access requests Managing Risk Awareness of your operational and regulatory risks which may impact on your role Responsibility for reporting to your line manager any risk which may impact the business Criteria Essential (attributes required for candidate to be considered) Desirable (attributes … practices and technologies Knowledge of data protection social norms across the EU Experience (what you have done) Experience in drafting and implementing data protection policies. Experience conducting data protection impactassessments and managing data breach incidents. Experience in preparing and maintaining records of data processing activities Experience in responding to data subject access requests and other requests from More ❯