IT & Data Compliance Manager - GDPR Specialist
Manchester: 3 days a week
Are you passionate about data protection, governance, and building a culture of compliance? We're looking for an IT & Data Compliance Manager with strong GDPR expertise to lead our organisation's approach to data protection and digital compliance.
In this pivotal role, you will ensure that our IT systems, data handling practices, and digital operations meet the highest standards of privacy, security, and regulatory compliance. You'll be the driving force behind our GDPR compliance strategy and a key advisor to teams across the business.
Key Responsibilities
Data Protection & Regulatory Compliance (GDPR Focus)
* Lead our GDPR compliance programme, ensuring all processes, policies, and systems align with regulatory requirements.
* Monitor and interpret data protection legislation (GDPR, CCPA, etc.) and IT-related regulations.
* Maintain and improve compliance frameworks, standards, and policies in line with GDPR and industry best practice.
* Serve as a primary contact for data protection queries, auditors, and regulatory bodies.
Governance, Risk & Controls
* Conduct compliance and data protection risk assessments across IT systems, data storage, and third-party vendors.
* Implement effective risk mitigation plans to address gaps, vulnerabilities, or non-compliance.
* Develop ongoing monitoring and reporting processes to track GDPR and IT compliance performance.
Policies, Training & Awareness
* Create, review, and update IT security, privacy, and data governance policies.
* Drive GDPR and data protection awareness across the organisation through training and communication initiatives.
Data Management & Security
* Oversee compliant data handling practices, covering collection, storage, access, transfer, retention, and disposal.
* Support incident response processes, ensuring GDPR-compliant breach management and notification procedures.
* Collaborate with IT, Security, Legal, and business units to embed data protection by design and by default.
Audit & Reporting
* Manage internal and external audits related to IT, data protection, and GDPR governance.
* Provide senior leadership with clear compliance reporting and actionable recommendations.
Qualifications & Skills
* Strong expertise in GDPR and working knowledge of global privacy laws (CCPA etc.).
* Familiarity with IT compliance frameworks (ISO 27001, SOC 2, NIST).
* Proven experience in IT compliance, risk management, data governance, or similar roles.
* Solid understanding of IT infrastructure, cybersecurity, and data lifecycle management.
* Strong communicator with the ability to translate complex technical and regulatory concepts for non-technical audiences.
Whats in it for you?
* Competitive salary and benefits package.
* Opportunity to influence and shape the organisation's long-term data protection and compliance strategy.
* Support for professional growth, certifications, and ongoing training.