Senior Privacy & Compliance Manager

Role Overview

• Support the day-to-day operation of the compliance programme
• Maintain compliance calendars, risk registers, and internal policy libraries
• Monitor regulatory developments across relevant UK, EU, and international frameworks
• Prepare compliance briefings and management updates
• Coordinate compliance training and awareness activities
• Support audit preparation and certification activities, including ISO 27001 and SOC 2
• Support GDPR compliance activities across the business
• Maintain privacy records, registers, and supporting documentation
• Coordinate Data Protection Impact Assessments (DPIAs)
• Manage Data Subject Rights Requests and associated processes
• Support processor due diligence and vendor privacy reviews
• Maintain privacy notices, policies, and supporting documentation
• Assist with international data transfer assessments and documentation
• Support the management of standard commercial agreements, including NDAs, DPAs, supplier agreements, and advisory contracts
• Maintain contract registers and renewal tracking
• Manage template libraries and version control
• Assist with legal due diligence activities relating to partnerships, procurement, and fundraising initiatives
• Coordinate document execution and filing processes
• Draft, maintain, and update internal policies and governance documentation
• Coordinate policy reviews and staff acknowledgements
• Support management reporting on compliance and risk matters
• Act as a first point of contact for internal compliance-related queries
• Escalate legal matters appropriately to the General Counsel

Requirements

• 4–8 years' experience within privacy, compliance, legal operations, governance, regulatory affairs, or similar functions
• Strong practical experience operating GDPR compliance processes
• Experience managing compliance programmes or compliance-related activities
• Experience supporting legal operations and contract administration
• Excellent written communication and documentation skills
• Strong organisational skills and attention to detail
• The ability to work independently whilst exercising sound professional judgement
• CIPP/E, CIPM, CIPT, or similar privacy/compliance certifications preferred
• Experience within SaaS, cybersecurity, fintech, or regulated technology environments preferred
• Exposure to ISO 27001 or SOC 2 programmes preferred
• Familiarity with NIS2, ePrivacy, AI Act, or related regulatory frameworks preferred
• Experience using contract lifecycle management tools or legal operations platforms preferred
• Experience supporting international privacy and compliance activities preferred

Tech Stack

• Cyber Security

Benefits

• Flexible remote working
• Opportunity to work alongside experienced legal, cybersecurity, technology, and commercial leaders
• Significant ownership and responsibility
• Exposure to complex international privacy and compliance matters
• Opportunity to contribute to the development of a growing technology platform