Senior Data Privacy Manager

Location: London, Manchester or Northampton - hybrid working

Marshall Wolfe hiring consultancy are supporting our client within financial services, for an experienced Senior Data Privacy Manager to lead and evolve a large-scale privacy programme within a highly regulated environment.

In this strategic leadership role, you will drive the organisation's data privacy strategy, ensuring compliance with UK GDPR, DPA 2018 and other regulatory requirements while embedding privacy-by-design across products, platforms and business processes. You will oversee privacy governance, risk assessments, DPIAs, international data transfers, incident response, data subject rights, retention programmes and privacy controls across the organisation.

Key Responsibilities

• Lead the development and implementation of data privacy policies, standards and governance frameworks.
• Drive privacy risk management, control effectiveness and regulatory compliance.
• Oversee DPIAs, TIAs, Records of Processing Activities (ROPA) and data breach response activities.
• Partner with technology, security and business teams to embed privacy-by-design into agile delivery and DevSecOps practices.
• Manage privacy tooling and data governance initiatives, including data discovery, classification and retention.
• Deliver privacy training and awareness programmes across the business.

Essential Experience

• Strong expertise in UK GDPR, DPA 2018, data privacy governance, DPIAs, TIAs and international data transfers.
• Experience leading privacy programmes within banking, financial services or another regulated environment.
• Experience managing privacy backlogs and delivering change in Agile environments.
• Knowledge of privacy technologies such as OneTrust, Purview, BigID or Collibra.
• Understanding of cloud platforms (Azure, AWS or GCP), modern data environments and DevSecOps practices.

Desirable Skills

• ISO 27701 / ISO 27001 and NIST Privacy Framework knowledge.
• Experience with Open Banking, PSD2, customer data platforms or consent management.
• CIPP/E, CIPM or CIPT certifications.
• Experience delivering large-scale privacy transformation programmes.