- Company Name
- Lawrence Harvey
- Job Title
- Senior Manager – Data Protection & Privacy Advisory
- Job Description
-
Job title: Senior Manager – Data Protection & Privacy Advisory
Role Summary: Lead privacy advisory engagements for financial services clients, translating regulatory requirements into actionable governance frameworks and controls that align with business objectives. Provide expert guidance on data use across B2C and financial environments, including customer lifecycle, marketing, analytics, and employee data.
Expactations: Serve as a trusted advisor on multiple client engagements, delivering measurable improvements in privacy maturity and governance. Mentor junior team members, contribute reusable frameworks and templates, and support business development efforts.
Key Responsibilities:
- Conduct discovery, assessment, and implementation of privacy programs for financial services clients.
- Translate UK and global privacy regulations into practical governance, processes, and controls.
- Design and refine privacy frameworks (DPIAs, LIAs, ROPAs, retention schedules, privacy notices, vendor due diligence, cross‑border transfer risk assessments, incident response plans).
- Advise on personal data use across customer lifecycle, marketing, analytics, and employee datasets.
- Support clients in navigating evolving privacy risks and regulatory developments.
- Collaborate on proposal development, reusable tools, and mentoring of junior staff.
Required Skills:
- Extensive hands‑on experience in data protection and privacy, including DPIA, LIA, transfer risk assessment, vendor due diligence, and governance framework delivery.
- Strong knowledge of UK Data Protection Act 2018, GDPR, and awareness of global regulations (e.g., CCPA, APPI, LGPD).
- Experience in financial services, both consulting/advisory and in‑house roles.
- Familiarity with privacy technology platforms (OneTrust, TrustArc) and standards (ISO/IEC 27701).
- Excellent analytical, project management, and stakeholder engagement abilities.
Required Education & Certifications:
- Bachelor’s degree in law, information technology, business, or related field.
- Professional privacy qualification (BCS/ISEB Privacy Professional, CIPP/US, CIPRM, or equivalent) preferred.