Deputy Data Protection Officer

You will support the Data Protection Officer, working alongside another Deputy Data Protection Officer, in setting strategic direction for privacy policies and managing personal data risk across the Partnership. In this role, you will influence key divisional teams to deliver our privacy strategy, ensuring privacy considerations sit at the heart of projects and is deeply embedded, to identify and mitigate key risks proactively.

You will also support the Data Protection Officer in delivering independent assurance to the Board, General Counsel, and Audit & Risk Committee, while guiding management to ensure robust compliance with legal frameworks and legislation, including the Data (Use and Access) Act 2025, Data Protection Act 2018, UK GDPR, and PECR.

At a glance

Hybrid working: This is a hybrid working role, therefore your time will primarily be split between working from home and the Head Offices - London / Bracknell. However, there will also be an expectation to visit other locations as the need arises.

You will be expected to work from the office location at least twice a week to connect and on a more ad-hoc basis to attend key meetings, but again the frequency is dependent on the business needs.

Expected Salary - Up to £90,000 (depending on experience)

Contract type - This position is a permanent contract.

Key Responsibilities

• Strategic Governance & Advisory: Help shape information and data strategies that safeguard the Partnership over the short and long term while leading and participating in key decision‑making forums and steering groups.
• Regulatory & External Liaison: Act as a deputised point of contact with the Information Commissioner’s Office (ICO), relevant supervisory authorities, and individual data subjects regarding privacy complaints, queries, and rights requests.
• Policy Ownership & Business Support: Design, maintain, and review data protection policies, guidance, and standards (including Fair Processing Notices and cookie policies) for Partners, customers, and suppliers. Advise accountable business owners so they understand their legal obligations, risks, and mitigation strategies.
• Privacy by Design & DPIA Management: Lead and maintain the Data Protection Impact Assessment (DPIA) methodology, tools, and risk acceptance processes alongside Data Owners. Orchestrate the implementation of "Privacy by Design" and "Privacy by Default" across medium‑and high‑risk projects.
• Risk & Accountability Frameworks: Establish and maintain a clear data privacy accountability framework, policy exception processes, risk reporting mechanisms, and controls for technical and organisational measures across the organisation.
• Breach & Rights Management: Lead day‑to‑day operations within the Data Privacy Office, maintaining the data breach response plan and overseeing the resolution of escalated rights requests and incidents.
• Team Leadership & Development: Recruit, manage, and retain a high‑performing privacy team. Create an internal operating model and SME training packages to build and maintain expert capability within the Data Privacy Office.
• Training &
  
  Education:
  
  Lead and maintain organisation‑wide Data Privacy and Information Security awareness programmes, spanning mandatory modules for all Partners and tailored training for high‑risk roles.

Essential Skills / Experience you’ll need

• Educated to degree level
• Legal qualification
• Legal & Regulatory experience
• Expert knowledge of Data Protection and operational compliance
• Experience of Leading and Managing a team of people
• Experience of Stakeholder management.

Desirable Skills / Experience you may have

• Law Degree
• Data Protection Certifications such as CIPP/E
• Experience of working within the Retail Industry and Tech/AI qualifications/experience.

Addition…