Data & Privacy Manager

The Vacancy Privacy Manager (12-Month Fixed Term Contract ) What can you expect? We are seeking a Privacy Manager to provide maternity cover for approximately 12 months. This role is primarily operational and will be responsible for the day-to-day management, maintenance and continual improvement of the firm's Privacy Information Management System (PIMS). The successful candidate will play a key role in maintaining the firm's ISO 27701 certification and supporting its wider information governance and data protection framework.

Working closely with the Data Protection Officer, Information Security, Risk & Compliance, HR and business teams, the role will focus on embedding effective privacy controls, coordinating assurance activities, managing privacy operations and driving continuous improvement across the firm.

Key Responsibilities Privacy Information Management System (PIMS) Maintain and enhance the firm's Privacy Information Management System (PIMS) in alignment with ISO 27701 requirements. Coordinate ongoing compliance with ISO 27701 and support integration with the firm's ISO 27001 Information Security Management System. Manage the review and update of privacy-related policies, procedures, standards and controls. Maintain privacy documentation, records and evidence required to support certification activities and internal assurance processes.

Monitor completion of privacy-related actions and improvement plans arising from audits, assessments and reviews. ISO 27701 Governance and Assurance Coordinate internal audits, management reviews and certification activities relating to ISO 27701. Support the preparation for external audits and certification assessments. Track privacy risks, issues and corrective actions, reporting progress to relevant governance forums. Produce management information, metrics and reporting on privacy and PIMS performance.

Identify opportunities to improve operational effectiveness and maturity of the firm's privacy programme. Privacy Operations Manage and maintain records of processing activities and data inventories. Support privacy assessments for new projects, technologies and business initiatives. Coordinate privacy review processes and ensure agreed actions are implemented and tracked through to completion. Maintain privacy management tools, workflows and registers, ensuring data remains accurate and up to date.

Support operational implementation of privacy-by-design principles across the firm. Incident and Risk Management Support the management of personal data incidents and breaches. Ensure incidents are appropriately recorded, investigated, monitored and escalated where required. Assist with root cause analysis and tracking of remediation activities to completion. Maintain privacy risk registers and support periodic risk reviews. Training and Awareness Coordinate privacy awareness campaigns and communications.

Deliver practical privacy training and guidance to business teams. Support development of learning materials, guidance documents and operational procedures. Stakeholder Management Work closely with Information Security, Risk & Compliance, IT, HR and business teams to ensure privacy controls remain effective. Act as a key operational contact for privacy-related queries and support requests. Escalate significant issues and emerging risks to the Data Protection Officer as appropriate.

Experience and Knowledge Experience Experience managing or supporting ISO 27701, ISO 27001 or similar governance frameworks. Experience maintaining management systems, policies, controls and audit evidence. Experience coordinating audits, assurance reviews or certification activities. Experience working within privacy, information governance, compliance, risk, information security or operational governance functions. Experience using governance, risk, compliance or privacy management platforms desirable. Knowledge Good understanding of privacy and data protection principles.

Familiarity with ISO 27701, ISO 27001 and privacy governance best practice. Understanding of operational risk management, control frameworks and continuous improvement methodologies. Knowledge of privacy management tools, records management and governance processes. Skills Strong organisational and project coordination skills. Excellent stakeholder management and communication skills. Ability to manage multiple work streams and competing priorities. Strong attention to detail and evidence management capability.

Analytical…