Job Description

The Role

We have an exciting new role opportunity within Risk and Compliance for a Data Protection Governance Specialist. This role will be instrumental in supporting the development, maintenance and enhancement of Collinson's data protection compliance framework. Working as part of the Data Protection team, the role will focus on ensuring data protection policies, procedures, guidance documents, templates and governance materials are accurate, consistent, practical and aligned with applicable legal and regulatory requirements. The role will help strengthen accountability, improve framework maturity and support the business in applying data protection requirements in a clear, proportionate and risk-based way.

Key Responsibilities

• Support the maintenance and enhancement of Collinson's data protection compliance framework, ensuring policies, standards, procedures and guidance remain accurate, practical and aligned to applicable data protection laws.
• Review, update and develop data protection policies, process documents, templates, playbooks, checklists and internal guidance materials.
• Work with the Group DPO and wider Data Protection team to improve the structure, consistency and accessibility of core data protection documentation.
• Support the embedding of data protection governance processes across the business, including clear ownership, escalation routes, approval flows and evidence of compliance.
• Assist with the implementation and ongoing improvement of the organisation's data protection accountability framework, including alignment with recognised regulatory expectations such as the ICO Accountability Framework.
• Help maintain key data protection governance records, including policy registers, control trackers, action logs, compliance evidence and framework maturity assessments.
• Support the development of practical guidance for business stakeholders on topics such as lawful basis, transparency, retention, international transfers, DPIAs, process management, records of processing and data protection by design and by default.
• Assist in identifying gaps, inconsistencies or outdated materials within the existing data protection framework and propose proportionate improvements.
• Work with stakeholders across various business functions to gather information and support the implementation of framework improvements.
• Support the preparation of data protection reporting materials, including progress updates, risk summaries, action plans and governance dashboards.
• Contribute to the development and refresh of data protection training and awareness materials, ensuring they reflect current policies, processes and regulatory expectations.
• Assist with the rollout and communication of updated data protection policies, procedures and guidance to relevant business areas.
• Support readiness activities for audits, assurance reviews and regulatory accountability requirements by helping collate documentation and evidence of compliance.
• Monitor and help document changes in internal processes, business activities or regulatory expectations that may require updates to the data protection framework.
• Promote a pragmatic, risk-based approach to data protection governance, ensuring documentation and processes are clear, usable and proportionate for the business.