Privacy Manager (GRC)

City, London
GCS

Join Our Mission to Champion Data Privacy

As part of our ongoing commitment to ethical business practices and data protection excellence, we are seeking a knowledgeable and principled Privacy Manager to join our Corporate GRC team.

This role is pivotal in supporting our Data Protection Officer (DPO) and advising the business on best practices related to data privacy. You’ll act as a subject matter expert (SME), navigating complex compliance landscapes and championing privacy risk management across our operations.

Key Responsibilities:

• Maintain and evolve key privacy governance materials including policies, procedures, DPIAs, ROPAs, and LIAs.
• Design and deliver engaging privacy training sessions and risk assessments across the business.
• Keep internal guidance, FAQs, and bid documentation up-to-date with legal developments and evolving industry standards.
• Conduct due diligence, audits, and respond to client privacy questionnaires.
• Provide specialist support on international data transfers including SCCs, TRAs, and IDTAs, working closely with clients and suppliers.
• Review and negotiate data protection clauses in contracts, ensuring compliance and identifying commercial opportunities.
• Manage requests involving live data usage, privacy exemptions, and provide internal advisory across departments including HR.
• Evaluate and provide feedback on DPIAs, ROPAs, and LIAs submitted by internal teams, ensuring alignment with legal obligations.
• Maintain external data protection registrations such as ICO and NHS DSPT.
• Oversee complex data subject rights requests and advise on appropriate responses.
• Support supplier onboarding through privacy risk assessments and due diligence reviews.
• Proactively identify data protection risks and guide the business through mitigation strategies, escalating issues as appropriate.

What We’re Looking For:

• Demonstrable expertise in data privacy and protection laws, particularly UK GDPR and international frameworks
• Strong experience in developing and maintaining privacy documentation and processes
• Confident in advising on privacy matters across departments and senior stakeholders
• Skilled in contractual analysis and negotiation in relation to data protection
• Excellent written and verbal communication skills, with a collaborative mindset
• High integrity and a strong ethical approach to business decisions

GCS is acting as an Employment Agency in relation to this vacancy.