How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Head of Data Protection
Company Description
Together is a forward-thinking mortgage and loan provider with over 50 years of experience. We help thousands of individuals, businesses, and professionals unlock their property ambitions through a common-sense approach to lending. Based in Cheadle, Cheshire, our 750-strong team supports customers across the UK, backed by a £7 billion loan book.
Our success comes from taking the time to understand our customers—we often step in where other lenders fall short. We make lending simpler, fairer, and more accessible.
Job Description: Head of Data Protection
The Head of Data Protection will strengthen Together Money’s compliance framework, ensuring alignment with the UK General Data Protection Regulations (UK GDPR), the Data Protection Act 2018 (DPA), the Privacy and Electronic Communications Regulations, Consumer Duty, and broader regulatory expectations.
As the strategic privacy and data protection leader, you’ll advise senior management and the Board on data governance, risk management, and compliance, acting as the primary subject matter expert in these critical areas.
Key Responsibilities
Strategic Leadership & Compliance
- Lead the development and implementation of Together Money’s data protection strategy
- Serve as the organisation’s designated Data Protection Officer (DPO) under UK GDPR
- Monitor ongoing compliance with data protection laws, internal policies, and regulatory obligations
- Advise on and oversee Data Protection Impact Assessments (DPIAs) for high-risk processing and initiatives
Engagement & External Liaison
- Act as the organisation’s main point of contact for the Information Commissioner’s Office (ICO), supporting consultations and regulatory queries
- Manage data subject rights requests (e.g., access, deletion, portability) and ensure timely, compliant responses
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Risk Management & Awareness
- Drive continuous improvement in data protection controls, training, and awareness programmes
- Assess, mitigate, and investigate complex or high-risk data protection incidents
- Develop KPIs, metrics, and Board-level reporting dashboards for data protection performance
Governance & Collaboration
- Oversee third-party data protection assurance and contractual controls
- Collaborate with Cyber Security to align privacy and security risk management
- Ensure Consumer Duty compliance, embedding vulnerable customer considerations across the business
Operational & Systemic Responsibilities
- Provide expert guidance to employees on UK GDPR, DPA 2018, and related regulations
- Monitor data retention, archiving, and disposal practices to ensure compliance
- Implement privacy by design and default across all systems and processes
- Lead internal and external audits related to privacy and information governance
Reporting & Advocacy
- Deliver regular reports to the CORC, Executive Risk Committee, and Board as required
- Champion a strong privacy culture and responsible data use within the business
Qualifications & Experience
Essential:
- Substantial experience as a Data Protection Officer or equivalent senior data protection professional
- Expert knowledge of UK and EU data protection laws, particularly UK GDPR and the Data Protection Act 2018
- Strong communication, negotiation, and interpersonal skills to engage with senior stakeholders
- Proven ability to drive continuous improvement in privacy and data governance practices
- Technical awareness of data management and emerging communication technologies
- Ability to lead investigations, influence policy, and ensure compliance across an organisation
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable:
- Certified Information Privacy Professional (CIPP/E) or Certified Information Privacy Technologist (CIPT)
- Certified Information Security Manager (CISM)
- Advanced report-writing and governance experience
- Familiarity with risk assessment methodologies and consumer duty frameworks
Note: Experience is not mandatory in all areas—we encourage applications from those with strengths in partial areas of requirement.
Company Benefits
Together invests in its people, offering a supportive and rewarding workplace.
📅 26 days holiday + birthday day (increasing to 30 days with service), plus **absent on bank holidays ️ Free access to company holiday homes (for employees to enjoy at leisure) 💰 Buy & sell holiday schemes 🎁 Discretionary annual bonus plus Shared Reward Bonus 💼 Matched pension contribution 🏥 Health cash plan + private medical insurance 🛡️ Life assurance and critical illness cover ⚡ Travel season ticket loans and Ride to Work Scheme 🏋️ Free local gym access 🍽️ Local bar & restaurant discounts
Diversity, Inclusion & Support
Together is an equal opportunity employer that celebrates diversity. We welcome candidates from varying backgrounds, skills, and perspectives, committed to building a team that embraces and champions inclusivity.
If you require support or reasonable adjustments at any stage of the recruitment process, please notify the recruitment team—we’re here to help.
Relevant reference, financial, and criminal record checks will be conducted for successful applicants.
Location & Working Arrangements
📍 Office Location: Cheadle, SK8 3GW (Office-based role) ⏰ Working Hours: Standard (09:00 – 17:30) 🏢 Department: Compliance 💼 Contract: Permanent
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills