PrivacyRisk &Compliance Officer

We are seeking an experienced and highly motivated Privacy, Risk & Compliance Officer to support and oversee the effective delivery of our Privacy, Risk and Compliance frameworks across the UK business.

This is a key role within the organisation, providing oversight, guidance and assurance across data privacy, regulatory compliance, operational risk and internal controls.

Working closely with senior leadership and teams across HR, Recruitment, Operations, IT, Procurement, Legal, Business Development and Account Management, you will ensure that regulatory requirements and global standards are effectively embedded throughout the business.

The role reports directly into the country management structure and maintains direct reporting relationships with the Regional Privacy Officer, Head of Risk and Head of Compliance.

• Oversee the implementation and ongoing management of privacy requirements across the business.
• Ensure appropriate privacy notices and consent documentation are issued and maintained for employees.
• Monitor personal data processing activities and identify new or changing processing requirements.
• Work closely with HR, Recruitment and other business functions to ensure privacy requirements are consistently applied.
• Support compliance with GDPR and other applicable data protection legislation.
• Act as a key point of contact for privacy-related queries, reviews and audits.

• Maintain accurate and complete Records of Processing (ROP) within One Trust.
• Ensure Controller and Processor records are appropriately documented and regularly reviewed.
• Identify and document new or amended personal data processing activities.
• Work with IT, Operations, Account Management and other functions to ensure records remain accurate and complete.
• Conduct quality reviews and challenge incomplete or inaccurate information where required.

• Lead the implementation and ongoing maintenance of the organisation’s Risk Management Framework.
• Identify, assess, monitor and report risks across the business.
• Work with senior management, risk owners and operational teams to ensure risks and internal controls are appropriately documented.
• Maintain accurate and comprehensive Risk Registers.
• Develop, monitor and support risk mitigation and remediation plans.
• Review the effectiveness of existing controls and recommend improvements.
• Escalate significant risk events in line with established governance processes.
• Provide regular risk and control reporting to the Global Risk Team.
• Promote a strong culture of risk awareness and accountability throughout the organisation.

• Support the implementation, maintenance and monitoring of the Global Compliance Framework.
• Monitor relevant regulatory and legislative developments relating to Privacy, Risk and Compliance.
• Identify areas of non-compliance or control weakness and support appropriate corrective actions.
• Act as a key point of contact for GDPR, BCR and other Privacy and Compliance audits.
• Support the delivery of mandatory Privacy and Compliance training.
• Prepare regular reports and management information for senior leadership and Global Privacy, Risk & Compliance teams.
• Provide guidance and support to operational teams to ensure adherence to internal standards and regulatory requirements.

• Work with Account Management, Business Development and Legal teams to ensure appropriate Privacy and Compliance provisions are included within client contracts.
• Support privacy amendments and negotiations relating to existing client agreements.
• Assist with client Privacy, Risk and Compliance due diligence.
• Provide updates and reporting on contractual privacy and compliance requirements.

• Oversee Privacy and Compliance due diligence for new and existing vendors.
• Partner with local and global Procurement teams to ensure appropriate checks are completed.
• Review Vendor Due Diligence Questionnaires and approve or elevate findings where appropriate.
• Ensure required due diligence is completed before new vendor agreements are executed.

• Support client bids and pre-sale discussions relating to Privacy, Risk and Compliance.
• Assist with client due diligence and assurance activities.
• Support new business go-live activity in line with established control frameworks.
• Provide specialist Privacy, Risk and Compliance…