Data Privacy Specialist hybrid

Location

Hybrid (1‑2 days/week in Windsor)

A leading global technology organisation seeks a knowledgeable and hands‑on Data Privacy Specialist to join their expanding data privacy and AI governance team based in London. The role is mid‑senior level and offers the chance to shape international privacy programmes, embed privacy by design, and advise cross‑functional teams on compliance and data ethics.

As a Data Privacy Specialist you will:

• Drive the design, delivery, and monitoring of international privacy programmes.
• Collaborate with engineering, product, infosec, legal, and commercial colleagues to embed robust privacy practices into product development and service delivery.
• Provide expert advice on GDPR and other global regulations while actively participating in risk assessments for new technologies such as AI/ML.
• Deliver targeted training sessions and awareness campaigns to cultivate a culture of responsible data use.
• Manage incident responses efficiently, coordinating investigations and post‑incident reviews.
• Support audits, track remediation progress, report key metrics, and ensure documentation meets regulatory requirements.
• Play a key role in supporting audits, tracking remediation progress, reporting on key metrics, and ensuring that all documentation meets regulatory requirements.

• Support the implementation of comprehensive privacy and AI governance frameworks across products, services, and operational processes.
• Monitor ongoing compliance with GDPR and other applicable global laws such as the EU AI Act and India Digital Data Protection Act.
• Lead or contribute to DPIAs, LIAs, TIAs, and maintain accurate records of processing activities.
• Collaborate with internal stakeholders to manage third‑party data sharing agreements, oversee international data transfers, and assist with contract reviews including DPAs and SCCs.
• Work with product managers and privacy engineers to embed privacy by design principles into all products from inception through delivery.
• Partner with technical teams to assess privacy risks associated with AI/ML projects and provide guidance on risk mitigation strategies.
• Deliver engaging privacy training sessions and awareness campaigns for both technical and non‑technical audiences.
• Assist in managing data breach incidents by coordinating investigations, mitigation efforts, notifications, and post‑incident reviews.
• Identify potential privacy risks, elevate concerns to the Data Protection Officer, and ensure effective documentation of actions taken.
• Support regular privacy audits and maturity assessments while tracking remediation efforts, trends in risk management, controls effectiveness, and preparing internal/external reports such as metrics for board updates.

Your proven experience as a Data Privacy Specialist will be central to your success. You bring a deep understanding of international data protection regulations—particularly GDPR—and the ability to apply these principles within technology‑driven organisations. You possess technical fluency, strong organisational skills, and a talent for building relationships across departments.

• Demonstrated experience spanning 3‑7 years in privacy or data protection roles within technology or SaaS environments.
• Comprehensive working knowledge of GDPR requirements in data‑driven organisations operating internationally.
• Proven track record supporting DPIAs, vendor risk reviews, and compliance for international data transfers.
• Technical fluency and the ability to work effectively alongside engineers and cloud teams; exposure to platforms such as AWS, GCP or Azure is highly valued.
• Exceptional organisational skills paired with an empathetic approach to stakeholder engagement.
• Experience using One Trust or similar tools for managing privacy programmes efficiently within complex environments.
• Professional certifications such as CIPP/E or CIPM are desirable but not essential.
• Familiarity with AI governance frameworks, data ethics considerations or ISO/BS standards such as ISO 27701 or ISO 42001 is advantageous.
• Background in engineering, cyber security, compliance or risk management enhances…