Allwyn
Data Protection Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Data Protection Specialist
Data Protection Specialist – Regulatory Affairs & Compliance, London
Allwyn Group is a multi-national lottery operator with a market-leading presence in Austria, the Czech Republic, UK, Greece, Cyprus, Italy, and the USA. In February 2024, Allwyn became the operator of the UK National Lottery. Over the next two years, we are taking an ambitious leap to revolutionise the global lottery category, offering a unique opportunity for professionals—both within and outside the industry—to shape our growth.
To support this vision, we are inviting experienced Privacy Professionals to join our Regulatory Affairs & Compliance team in London. This role has blends sharp legal strategy with business-focused execution.
About the Role
You will partner closely with the Group Data Protection Officer & Head of Data Protection, contributing to the strengthening and scaling of Allwyn’s privacy framework and compliance strategy.
Your Key Responsibilities:
- Support the implementation and use of privacy management tools, including workflows, user guidance, and templates.
- Draft clear, practical redacted content, privacy notices, trainings, and awareness materials.
- Lead Data Protection Impact Assessments (DPIAs), risk assessments, and supplier audits—from scoping to completion.
- Review third-party agreements, vendor due diligence, and data processing terms, identifying legal and compliance gaps.
- Maintain privacy governance records while supporting day-to-day operations.
- Work on cross-market, HQ-led projects with multiple internal and external stakeholders.
- Proactively identify privacy risks and escalate critical issues to the Group DPO & Head of Data Protection.
- Monitor regulatory trends (including GDPR, ePrivacy, AI frameworks, and emerging global privacy laws) and translate them into actionable guidance.
- Optimise privacy processes, templates, and governance to scale the function.
- Gradually take ownership of key privacy workstreams.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
We’re Looking for...
- 4+ years of experience in data protection within a regulated commercial environment—essential.
- Expertise in UK/EU GDPR (plusBonus: US or other international privacy law exposure).
- A degree in law, data protection, technology, or a related field—privacy certifications (e.g., CIPP/E, CIPM, CIPT) welcome.
- Knowledge in AI governance is a considerable plus.
- Proven track record drafting DPIAs, privacy notices, policies, and data processing agreements.
- Experience with privacy management tools or training/awareness platforms.
- Familiarity with digital/data environments (e.g., cookie consent, online tracking, marketing channels).
- Ability to negotiate effectively with Legal, Tech, Product, and People&Culture teams.
- Comfort in working independently while exercising judgment—knowing when to escalate.
- High attention to detail, analytical rigour, and resilience in a fast-paced environment.
- Fluent English (essential).


Get help with your application
Your very own career expert that helps elevate your application to the next level.
What You’ll Gain
- A stable position in a dynamic, international team known for its collaborative culture.
- Competitive base salary + annual performance-based bonus.
- 25 vacation days + flexible benefits:
- Company pension contribution
- Life assurance
- Comprehensive private medical insurance
- Company supported events:
- Health days, sports sponsorships, and social gatherings.
- Crew members: Unlimited Udemy eLearning access.
- Industry event attendance, conferences, and workshops, with privacy development focus.
- Work equipment:
- Company laptop
- Company mobile designed for work (with paid SIM) including private data coverage.
- Premier London location: Office right by Bond Street Underground Station.
This is more than a job—it’s a turning point in a thriving, evolving industry. Ready to embark? Apply directly and help us transform global gaming standards.
Does this opportunity spark your passion? Feel free to reach out for more information or to apply!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location