My client is hiring a Senior Data Protection Consultant to deliver expert data protection and privacy compliance services across a wide range of client organisations. This role involves leading advisory projects, ensuring GDPR and broader regulatory compliance, and supporting internal teams with practical, risk-based guidance. The successful candidate will play a key role in managing data protection strategy, risk assessments, and client relationships.
Key Responsibilities
* Independently deliver client advisory work, including privacy notices, briefing papers, consent models, and policy reviews.
* Conduct data protection impact assessments (DPIAs), gap and risk analyses, and data mapping exercises.
* Review and draft data sharing agreements, transfer impact assessments (TIAs), and service-level agreements (SLAs).
* Apply peer review processes and quality controls to ensure accuracy and compliance.
* Identify and manage risks in privacy and data protection projects.
* Lead client-facing projects involving data governance and regulatory compliance.
* Build and maintain strong working relationships with clients and external stakeholders.
* Attend meetings, briefings, and site visits representing the privacy function.
* Draft reports, action plans, and project documentation.
* Mentor and support junior team members on privacy matters and project delivery.
* Coordinate project workflows, manage timelines, and ensure on-time delivery.
* Monitor developments in data protection regulation and translate into actionable business guidance.
Qualifications and Experience
* Postgraduate qualification (LLM, MSc) in law, information governance, or related field.
* Certification in data protection (e.g. CIPP/E, CIPM, or equivalent).
* Minimum 5 years' experience in data protection, privacy, or compliance roles.
* Experience delivering risk assessments and privacy audits in complex environments.
* Proven ability to manage multiple projects independently from initiation to delivery.
* Strong experience in a consultancy or advisory setting.
* Excellent communication and stakeholder engagement skills.
Preferred
* Experience drafting external-facing content such as newsletters or client briefings.
* Knowledge of international privacy frameworks (e.g. US, APAC).
* Basic understanding of cybersecurity principles.