How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Head of Data Protection
Company Description
We’re Together. For over 50 years, we’ve helped thousands of people, businesses, and professionals unlock their property ambitions with our common-sense approach to mortgages and secured loans.
We take the time to understand our customers, and our door is always open, so we can often help when other lenders can’t—or won’t. Based in Cheadle, Cheshire, our 750 colleagues help our customers throughout the UK, backed by the power of a £7 billion loan book.
Benefits of Working at Together
Core Benefits
- 26 days of holiday (increasing to 30 days with service)
- A day off for your birthday
- Holiday home access (free)
- Holiday buy & sell option
Wellbeing & Growth
- Discretionary annual bonus plus additional Shared Reward Bonus
- Matched pension contribution
- Health cash plan plus Private medical insurance
Security & Perks
- Life assurance and Critical illness cover
- Travel season ticket loan and Ride-to-Work scheme
- Free access to our local gym
- Discounts on local bars and restaurants
Job Description
As the Head of Data Protection, you will oversee Together Money’s Data Protection Framework, ensuring compliance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018 (DPA)
- Privacy and Electronic Communications Regulations
- Consumer Duty and regulatory expectations
This role provides strategic leadership on privacy, data protection, data governance, and information risk, acting as the primary subject matter expert to senior management and the Board.
Key Responsibilities
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Lead the development and implementation of Together Money’s data protection strategy
- Serve as the organisation’s Data Protection Officer (DPO) under UK GDPR
- Monitor compliance with:
- Data protection laws
- Internal policies
- Regulatory obligations
- Provide advice on and oversee Data Protection Impact Assessments (DPIAs) for high-risk processing and change projects
- Act as the main point of contact for the Information Commissioner’s Office (ICO), including ICO consultations
- Serve as the contact point for data subjects, including exercising their privacy rights and handling queries
- Drive continuous improvement in:
- Data protection controls
- Data protection training and awareness programmes
- Provide expert guidance on:
- New products and systems
- Change initiatives
- UK GDPR, DPA 2018, and related legislation
- Monitor compliance with:
- Data protection laws
- Internal policies
- Assigning responsibilities, overseeing audits, and driving awareness and training
- Ensure equity-by-design and default in all projects
- Lead investigations into data protection incidents (especially complex/high-risk cases)
- Develop data protection KPIs and Board-level reporting dashboards
- Support enterprise-wide risk management and governance
- Contribute to Consumer Duty compliance, embedding consideration for vulnerable customers
- Provide reports to CORC, Executive Risk Committee, and Board
- Oversee third-party data protection assurance and contractual controls
- Champion a strong privacy culture and responsible data use across the business
- Lead internal awareness campaigns for enhanced data protection compliance
- Support:
- Internal and external audits (Privacy & Information Governance)
- Collaboration with Cyber Security in privacy and security risk alignment
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications & Experience
Essential
✅ Experienced Data Protection professional with substantial DPO experience ✅ Strong communication, negotiation, influencing, and interpersonal skills ✅ In-depth knowledge of UK GDPR and EU data protections laws ✅ Technical awareness of data management and communication technologies ✅ Experience in continuous improvement driving high performance
Desirable (Not Mandatory)
🔹 Certified Information Privacy Professional(Europe) (CIPP/E) 🔹 Certified Information Privacy Technologist (CIPT) 🔹 Certified Information Security Manager (CISM) 🔹 Advanced report-writing experience
Applicants with some but not all qualifications are encouraged to apply.
Additional Information
Commitment to Diversity & Inclusion
Together embraces diversity and inclusion, fostering an equal opportunity workplace. We celebrate varied backgrounds, perspectives, and skills.
Reasonable Adjustments
If reasonable adjustments are needed during recruitment, please inform the team during your application—any requested accommodations will be implemented to support your best performance.
Pre-Checks for Successful Candidates
- Employment references
- Financial background checks
- Criminal record checks
Working Arrangements
- Office-based (Cheadle, SK8 3GW)
- Standard hours (09:00–17:30)
- Permanent contract (Compliance Department)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills