Data Protection Professional

Job Overview
This role provides advanced, autonomous expertise in delivering high‑quality, defensible data protection assessments for complex and high‑risk processing. It translates intricate regulatory and policy requirements into practical, scalable outcomes and serves as an escalation point for sensitive or ambiguous cases. Beyond individual delivery, the role enhances service consistency, mentors colleagues, and contributes to continuous improvement of assessment frameworks and operational practices—strengthening the organization’s overall data protection maturity.
Key responsibilities
Provide strategic oversight and quality assurance for end‑to‑end RoPA documentation and complex data protection assessments (DPIA, LIA, SPA, TIA) across multiple business units
Assess data protection risks and recommend proportionate and pragmatic mitigation measures
Interpret complex regulatory, legal, and policy requirements and translate them into frameworks and operational processes
Independently manage and resolve high‑risk, high‑complexity, or ambiguous processing activities, providing authoritative guidance to cross‑functional stakeholders
Oversee and mentor junior team members, providing technical guidance, reviewing assessment outputs, and driving capability uplift
Lead continuous improvement initiatives for assessment frameworks, templates, tooling, and guidance documentation
Key Capabilities/Experience
Expert knowledge of core data protection & privacy principles and regulatory frameworks.
Deep hands-on experience with data protection assessments, vendor risk assessments, data breach assessment, and DSR handling.
Ability to articulate complex data protection & privacy positions clearly and confidently
Experience guiding others without formal line-management dependency
Minimum Qualifications
Over 7 years of hands-on data protection & privacy compliance experience
Background in technology, information security, risk management, or legal
Data protection & privacy training or certifications (CIPM, CIPP/E, CIPP/US, CIPT)
Experience with privacy tools (preferred)