Data Privacy Manager (Contract – Inside IR35)
Hybrid – up to 2 days onsite near Burgess Hill, West Sussex
Contract | Inside IR35
About the Role
We’re seeking an experienced Data Privacy Manager to lead the implementation and ongoing management of a comprehensive privacy compliance framework within a leading healthcare and diagnostics organisation.
You’ll be instrumental in ensuring full compliance with UK GDPR, EU GDPR, and the Data Protection Act 2018, while driving awareness, accountability, and a strong privacy culture across the business.
Reporting to the Director of Legal & Compliance (Data Protection Officer), this role offers the opportunity to make a strategic impact by shaping privacy governance and embedding best practices throughout a complex, matrixed organisation.
Key Responsibilities
* Implement, monitor, and maintain the local data privacy and protection framework, ensuring compliance with all applicable regulations.
* Collaborate with the DPO, Legal, Compliance, IT, Cybersecurity, and Digital teams to manage data privacy risk and governance.
* Lead and oversee DPIAs, risk assessments, and incident response management.
* Manage data subject rights requests (DSARs) and ensure transparent data handling processes.
* Develop and maintain privacy notices, SOPs, and records of processing activities (RoPAs).
* Conduct training and awareness programs to build a culture of privacy compliance and accountability.
* Oversee supplier and processor due diligence, ensuring GDPR-aligned contracts and safeguards.
* Support internal and external audits, compliance monitoring, and certification programs (e.g., DSPT, Cyber Essentials Plus, ISO27001).
* Deliver regular privacy reports and updates to senior leadership.
* Act as a visible privacy leader, promoting ethical data use, privacy by design, and continuous improvement.
1. What You’ll Bring
* Proven experience in data privacy, data protection, or information governance roles.
* Strong working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018.
* Experience in developing and implementing privacy compliance frameworks.
* Hands-on expertise in risk management, DPIAs, and incident response.
* Excellent stakeholder management, communication, and influencing skills.
* Ability to work confidently within a complex, matrixed, and regulated environment.
* Degree educated (or equivalent experience).
2. Preferred Qualifications
* CIPP/E, CIPM, CDPO, or equivalent privacy certifications (IAPP/PECB).
* ISO 27001 Lead Auditor or ISO 27701 qualification.
* Experience in healthcare, life sciences, or diagnostics sectors.
* Familiarity with AI governance, data ethics, and emerging technologies such as digital health and analytics.
3. Why This Role?
This is a fantastic opportunity to play a key role in an organisation that is advancing healthcare innovation through ethical data management and strong privacy governance. You’ll influence senior stakeholders, lead privacy initiatives, and ensure compliance in an evolving digital landscape — all within a supportive, forward-thinking culture.
#DataPrivacyManager #DataProtection #GDPR #UKGDPR #Compliance #InformationGovernance #PrivacyCompliance #DataGovernance #DPO #HealthcareCompliance #LifeSciences #Diagnostics #ISO27001 #CIPP #CIPM #PrivacyByDesign #DPIA #RiskManagement #HybridWork #LegalCompliance #ContractJob