BNP Paribas Personal Finance

About the Company

BNP Paribas Personal Finance is 100% BNP Paribas group subsidiary and the European leader in personal finance. With a presence in 33 countries, our customers, partners and employees write our company's story as they share our philosophy: promote access to a more responsible and sustainable consumption.


To learn more about our Data Protection Policy:
https://bnpp.lk/0L782b

Listed Jobs

Company Name

BNP Paribas Personal Finance

Job Title

Data Privacy Manager

Job Description

**Job Title** Data Privacy Manager **Role Summary** Lead privacy governance to ensure compliance with UK GDPR, the Data Protection Act 2018, PECR, and BCBS239. Own the creation and maintenance of DPIAs, ROPA, cookie/privacy assessments, and oversee data quality and stewardship across the organisation. Act as a subject‑matter expert, providing guidance, training, and risk mitigation to stakeholders while embedding a culture of privacy and data protection. **Expectations** - Deliver timely, accurate privacy documentation and assessments. - Collaborate with Risk, Finance, IT, Marketing and other business units to embed privacy controls. - Maintain up‑to‑date knowledge of regulatory requirements and translate them into actionable business processes. - Champion continuous improvement of data governance practices and foster a data‑centric culture. **Key Responsibilities** 1. Conduct and document DPIAs, ROPA, Cookie Privacy, and Legitimate Interest assessments. 2. Assess and improve data quality; perform root‑cause analyses for data issues. 3. Manage cross‑functional stakeholders; translate technical and commercial concepts for diverse audiences. 4. Identify and recommend data governance improvements and ensure alignment with BCBS239 and other regulations. 5. Represent the data governance team across analytics and business areas, advising on data integrity, privacy, and technical controls. 6. Develop remedial programmes to highlight and mitigate ongoing privacy risks. 7. Champion data governance awareness and deliver training/educational materials. **Required Skills** - In‑depth knowledge of UK GDPR, PECR, BCBS239, and data privacy frameworks. - Proven experience in data governance or protection roles. - Strong stakeholder relationship and communication skills with both technical and non‑technical audiences. - Ability to extract information through questioning, active listening, and interviewing. - Project management capability (preferred). - Familiarity with data architecture, quality frameworks, and privacy‑by‑design principles. **Required Education & Certifications** - Bachelor’s degree in Law, Information Technology, Information Systems, or related field. - Professional certification in data protection (e.g., CIPP/E, CIPT, or equivalent UK privacy certification) preferred. ---

Solihull, United kingdom

Hybrid

18-02-2026