Allen Lane
Data Protection Manager
London
Posted about 14 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Allen Lane are partnering with a not-for-profit organisation on their recruitment for an interim Data Protection Manager. This is a 3-6 month contract inside IR35 and hybrid working with 1-2 times a week onsite in London.
OVERALL ACCOUNTABILITIES:
- Carry out a full GDPR compliance audit and identify where there may be gaps or deficiencies, producing a clear formal report of the same
- Propose and implement remedial actions arising from the above audit where needed
- Overhaul all data protection documentation, producing a relevant and accessible, principles based, revised Data Protection Policy and accompanying processes and forms
- Ensure that all data flows are mapped by the relevant teams and that Data Protection Impact Assessments are created where appropriate
- Work with relevant teams to review data protection requirements in relation to systems, suppliers, contracts and data sharing arrangements, advising on any gaps or remedial actions required
- Based on findings of audit, identify where training is needed and work with the Head of Learning & Development to develop fit for purpose training on operational aspects of GDPR, including DPIAs (and when they are not needed) and data flow mapping requirements
- Work with the Fundraising team to ensure emerging fundraising practices are compliant with legislation and our data protection principles and support the build of a dedicated fundraising data policy if appropriate
- Act as the first point of contact for all data subject access requests, working with service and enabling teams to identify the required data and escalating to the Director of Finance & Resources where needed
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Qualifications/ Knowledge
- Strong working knowledge of UK GDPR, the Data Protection Act 2018 and PECR, as well as emerging legislation such as the Data (Use & Access) Act 2025, with the ability to apply these requirements in a practical organisational context
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience
- Experience of carrying out data protection or GDPR compliance reviews, identifying gaps or deficiencies, and producing clear, prioritised recommendations for improvement.
- Experience of developing or improving data protection policies, processes, forms and guidance so that they are clear, accessible and fit for purpose.
- Practical experience of supporting data flow mapping and Data Protection Impact Assessments, including advising when DPIAs are and are not required.
- Experience of managing or supporting data subject access requests, data protection enquiries, and potential data protection incidents or breaches.
- Ability to work confidently with colleagues across different teams to understand operational practice, advise on data protection requirements, and support proportionate remedial action.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
GDPR Compliance
Data Protection Audit
Data Protection Impact Assessments
Data Flow Mapping
UK GDPR
Data Protection Act 2018
PECR
Data Subject Access Requests
Policy Development
Compliance Reporting
Stakeholder Management
Data Privacy Training
Location