Senior Manager, Data & Privacy Risk Specialist

## Senior Manager, Data & Privacy Risk Specialist Apply locations:
Bristol:
Cardiff:
Halifax:
Leedstime type:
Full time posted on:
Posted Todaytime left to apply:
End Date:
September 4, 2026 (30 days left to apply) job requisition :
161012
** End Date
** Thursday 03 September 2026
** Salary Range**£85,493 - £100,580
** We support flexible working –  for more information on flexible working options
**** Flexible Working Options
** Hybrid Working, Job Share
** Job Description Summary
** About this opportunity  Data is among the most valuable strategic assets held by the Group. As our use of cloud, AI, advanced analytics and digital technologies continues to grow, effective management of risks related to data has never been more important.  We seek an experienced Data Risk professional to join our Data & Privacy Risk Specialist team. This is a senior second line role providing independent oversight, challenge and insight across the organisation’s management of data-related risks.  

Working at the intersection of data, technology, risk and regulation, you'll play a key role in influencing decision-making, strengthening risk management practices and supporting safe, sustainable innovation.
** Job Description
**** What you'll be doing
**** Risk Oversight & Challenge
*** Provide independent second-line supervision and critical review of data-related risks across business areas, pivotal initiatives and transformation programmes.
* Assess how well data risk governance, controls and frameworks perform, ensuring alignment to risk appetite, regulatory expectations and the Group Risk Management Framework.
* Provide clear, evidence-based risk opinions and recommendations to support risk decisions, remediation activity and investment outcomes.
** Monitoring, Assessment & Insight
*** Monitor the data risk landscape, identifying emerging risks, control weaknesses, systemic themes and technology-related risks.
* Analyse risk indicators, incidents, assurance findings and management information to provide data-driven insight and challenge.
* Evolve risk reporting, metrics and oversight approaches to improve risk visibility and support timely management action including policy compliance assessment.
** Strategy, Change & Technology
*** Provide oversight and challenge across major change programmes, regulatory developments and new technologies including AI and cloud.
* Contribute to the continuous improvement of the Group's data risk framework, appetite and oversight approach.
* Build trusted relationships with senior stakeholders across the three lines of defence to influence effective risk management and positive customer outcomes.
** Technical Data Risk Expertise (Essential)
** You'll bring expertise across a range of data risk disciplines, including:
* Data governance, quality, lineage and metadata.
* Privacy, retention, records management and data lifecycle controls.
* Data architecture, cloud technologies, AI and advanced analytics.

You'll also provide expert guidance on complex data risk issues and assess how technology, operating models and data capabilities influence risk exposure.
** What we hope to find
*** Significant experience in data risk, data governance, data management or a related risk subject area within a complex organisation.
* Solid grasp of frameworks, oversight, safeguards, and risk management addressing potential threats to data throughout its lifecycle.
* Knowledge of modern data environments, including cloud-based systems, cognitive computing, in-depth analytical methods, and data architecture.
* Experience delivering autonomous review, critical evaluation and assurance, with the ability to assess risk frameworks, controls and operating models.
* Excellent analytical, communication and partner management skills, capable of influencing senior decision-makers and driving positive risk outcomes.
** It would be great if you also have
*** Experience leading thematic reviews, risk assessments or assurance activities within a Non-Financial risk environment.
* Professional qualifications in risk, data management, data governance, privacy or technology-related disciplines.
* Knowledge of BCBS
239, GDPR, UK Data Protection requirements, AI…