Kennedys
Senior Data Risk Manager (Privacy)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Data Risk Manager (Privacy)
Senior Data Risk Manager – Fixed Term Contract (12 Months)
Kennedys is looking for a Senior Data Risk Manager to join us on a 12 month fixed term contract. This role provides strategic oversight and operational leadership across data privacy, regulatory compliance, and information risk. The role ensures personal data is managed lawfully, securely, and in line with global regulatory requirements, acting as a subject matter expert in data protection and privacy risk.
Team
Kennedys Risk & Compliance team handles a wide range of partnership and risk and compliance issues for the firm and acts as an in-house legal department assisting with regulatory and professional conduct enquiries. Within this, the Data Risk Team specialises in risk to data, privacy, and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever-developing technology such as AI.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Act as SME on data protection (GDPR, UK DPA)
- Lead DPIAs and privacy risk assessments
- Oversee the maintenance of risk registers and mitigation plans
- Develop privacy policies and frameworks
- Support ISMS and ISO 27001 alignment
- Lead incident and breach management
- Engage stakeholders and deliver training
- Support AI and emerging risk governance
- Product owner for Surecloud (or equiv) Platform
- Lead and develop team members and deputise for Head of Data Risk as required
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required Experience
- Strong knowledge of GDPR and global privacy laws (including HIPAA, PIPA and Australian Privacy laws)
- Experience in data risk management and governance
- DPIA and incident management experience
- Understanding of ISO 27001 and ISMS
- Demonstratable experience in assessing AI and privacy risks
- Stakeholder engagement skills
To learn more, kindly validate if you require any additional support or adjustments to submit your application to Kennedys.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location