Data Protection & Privacy Manager

Job Title: Data Protection Manager (Fixed Term Contract until October 2027)

A bit about the role:

This role reports into the Group Data Protection Officer for N Brown Group Ltd. The role leads the day-to-day delivery of the Data Protection & Privacy function, managing key processes and escalating to the DPO where necessary. The role has significant stakeholder management responsibilities, working closely with legal teams, Risk and Compliance Teams and General Counsel to ensure our businesses react to and stay ahead of change in the data privacy space.

What you’ll do (Responsibilities and Accountabilities):

* Provide day to day support to the Data Protection Officer in fulfilling the Data Protection Strategy

* Manage data subject access requests and e-discovery requests in a timely manner

* Work together with the DPO on maintaining group-wide data protection policies, guidelines, processes

* Report on data protection issues to the DPO in a timely manner

* Support the DPO in all internal and external audits

* Maintain the Record of processing activities register and update accordingly

* Support the training and awareness activities on data protection for the group

* Perform and manage data protection impact assessments on new and updated initiatives

* Run monthly MI reports on all data protection activities

* Take ownership and maintain all key logs such as the DSAR, data incidents, DPIA, supplier logs

* Check data protection controls are applied and embedded properly in projects

* Ensure contracts/agreements meet data protection requirements as and when required

* Lead Privacy Initiatives: Spearhead large-scale, cross-functional privacy improvement projects.

* Assess DPIAs/PIAs: Provide pragmatic privacy advice on innovative business projects, including algorithms, GenAI, automation, and personalisation.

* Directly line manage the Data Protection Advisors and Data Protection Administrator, overseeing team performance, workload, and the effectiveness of the information rights requests process.

* AI Project Advisory: Advise on privacy risks associated with new GenAI and AI-related projects.

* Incident Management: Manage medium and large-scale personal data incidents, including investigation, response, notification assessment, and remediation.

* Privacy Program Support: Assist in managing the data privacy program and compliance framework.

* Rights Requests Supervision: Advise on the accurate and timely processing of consumer and employee individual rights requests.

* Policy Development: Draft internal policies, procedures, and guidance materials, and maintain compliance documentation.

* Regulatory Response: Lead and manage all ICO correspondence, including regulatory reviews, investigations, and dawn raids (e.g. cookie compliance reviews), ensuring responses are timely, accurate, and appropriately evidenced; escalating to the Group DPO where required.

* Compliance Audits: Lead and conduct data protection departmental compliance audits.

Who you are (Job qualifications and key skills):

* Extensive experience within Data Protection and Privacy (EU & UK)

* Three or more years of experience in data protection compliance or related field

* Expertise in data protection laws and practices, including deep understanding of GDPR

* Experience in a legal, audit, or risk management role

* Excellent verbal and written communication skills, with strong attention to detail

* Proven leadership experience

* CIPM / CIPP/E / Practitioner in DP would be advantageous

What’s in it for you?

Hybrid working (3 days in the office at a minimum)

24 days holiday (+ 8 bank holidays)

Annual bonus scheme

Enhanced maternity and adoption leave

Company pension with up to 8% N Brown contribution

Mental Health support both internally and externally, including access to our wellbeing champions and counselling services

A range of financial wellbeing support

Stream - a financial wellbeing tool that helps you track your pay, access earnings early and manage your money with confidence

Colleague discount across all N Brown brands

Onsite café with subsidised rates and local restaurant discounts!

Life Assurance and Private Medical Insurance

Paid volunteer time – all our colleagues can take a full day paid to volunteer for a charity of their choice
Only candidates based in UK and eligible to work in UK are allowed