Senior Data Protection Manager

Nottingham Trent House (95002), United Kingdom, Nottingham, Nottinghamshire Senior Data Protection Manager

Job Title:

Senior Manager - Data Protection

Location:

London or Nottingham

Working Pattern: 3 days in-office (Tuesday-Thursday) and 2 days remote.

We’re on a mission to be a force for good in lending. Throughout our almost 30-year history, we’ve consistently been recognised as a great place to work; in 2026, Capital One was officially ranked 9th in the UK’s Best Workplaces™ list. Hear from our team about what it’s like working at Capital One UK.

This is an exciting opportunity for an experienced compliance professional with specialist expertise in data protection and privacy to join our UK Compliance team.

The role provides trusted, risk-based advice to senior business stakeholders, ensuring that data protection requirements are effectively embedded alongside FCA regulatory obligations. The role will be particularly important where privacy, customer outcomes, conduct risk, Consumer Duty, technology, AI and financial services regulation intersect.

You will act as a credible adviser and constructive challenger to the business, translating complex regulatory requirements into practical, proportionate and commercially focused solutions.

• Act as a senior subject matter expert on UK GDPR and the Data Protection Act 2018, providing authoritative advice on privacy risks across products, customer journeys, and emerging technologies like AI.
• Provide broad compliance expertise across the FCA regulatory framework, driving appropriate customer outcomes and supporting the business in demonstrating compliance with the Consumer Duty.
• Serve as a trusted advisor and constructive challenger to senior business leaders, translating complex regulatory requirements into practical, proportionate, and commercially focused solutions.
• Review and challenge DPIAs and Legitimate Interest Assessments, ensuring customer data is used appropriately to identify and address poor customer outcomes.
• Develop strong relationships across Product, Operations, Technology, Legal, and Information Security teams to seamlessly embed FCA and data protection standards into business transformation programmes.

• Significant experience within a UK financial services Compliance, Risk, Legal, or Data Protection environment, with a specialist focus on privacy.
• Strong technical knowledge of UK GDPR, the Data Protection Act 2018, and ICO expectations, including hands‑on experience conducting DPIAs and LIAs.
• Demonstrable experience working with the FCA regulatory framework, with the ability to apply Consumer Duty and conduct risk requirements to practical business processes.
• Proven ability to act as a strategic thinker and influential leader, confident in managing senior stakeholders and advising executives on complex, potentially contentious regulatory matters.
• Excellent communication and presentation skills, capable of simplifying complex legislation and preparing clear, succinct Board and Executive‑level risk assessments.

This is a permanent position based in either our Nottingham or London office. We embrace a hybrid approach to work.

You’ll spend three days a week in the office (Tuesday-Thursday), with Monday and Friday being dedicated work‑from‑home days.

Our offices are designed to inspire and support you. At our Nottingham head office, you’ll find an on‑site gym, restaurant and dedicated Learning Loft. Our London office boasts a rooftop running track and coffee bar.

We invest in the growth of our people alongside our business. You will have extensive opportunities to learn and develop your career, including access to up to £5,000 in…