Job Description
A major government organisation is seeking an experienced Data Protection Lead to join a growing Data Governance team supporting one of the UK's highest-profile digital transformation programmes. This is a hands-on privacy role focused on embedding Privacy by Design across complex digital products and services, ensuring compliance while enabling innovation and delivery at pace.
This is not a traditional DPO or privacy governance position. The hiring manager is specifically seeking an experienced privacy practitioner who remains actively involved in conducting and leading Data Protection Impact Assessments (DPIAs), working closely with developers, architects, product teams and senior stakeholders to identify, assess and mitigate privacy risks within digital delivery environments.
You will act as a trusted adviser across product, technical, legal, security and policy teams, supporting the delivery of GOV.
UK One Login and other critical digital services. The successful candidate will have strong experience applying UK GDPR in complex technology environments and a proven ability to balance compliance requirements with delivery objectives.
The ideal candidate will come from a digital product, technology transformation or government delivery background and will be comfortable working autonomously, managing ambiguity and delivering pragmatic privacy solutions that enable successful outcomes rather than acting as a blocker to delivery.
Key Responsibilities
- Lead the implementation of Privacy by Design across digital products, services and programmes
- Personally lead and author complex Data Protection Impact Assessments (DPIAs) for new technologies, products and business change initiatives
- Provide expert advice on UK GDPR, Data Protection Act 2018, PECR and wider privacy obligations
- Work closely with developers, architects, engineers and product teams to embed privacy into service design and delivery
- Identify, assess and manage privacy risks, ensuring effective mitigation and governance arrangements are in place
- Advise on complex areas including identity assurance, analytics, AI, data sharing, transparency and biometric processing
- Support the creation of privacy notices, data sharing agreements, governance artefacts and risk assessments
- Build strong relationships with technical and non-technical stakeholders across delivery, legal, policy and security functions
- Prepare recommendations, briefings and governance papers for senior leaders and programme boards
- Champion a pragmatic and enabling approach to data protection across the organisation
Ideal Candidate
- Extensive hands-on experience conducting and delivering DPIAs within complex digital or technology environments
- Strong track record embedding Privacy by Design into digital products, platforms or transformation programmes
- Demonstrable experience working directly with developers, software engineers, architects and multidisciplinary delivery teams
- Expert knowledge of UK GDPR, the Data Protection Act 2018 and privacy risk management principles
- Experience supporting large-scale digital transformation or product delivery initiatives, ideally within government or the public sector
- Strong stakeholder management skills with experience engaging senior leaders and influencing decision making
- Comfortable working independently while remaining collaborative within a high-performing team environment
- Ability to operate effectively in fast-paced, ambiguous environments and provide pragmatic, delivery-focused solutions
- Experience with data sharing, identity services, analytics, AI governance or emerging technologies would be advantageous
- Strong communication and interpersonal skills with the ability to engage both technical and non-technical audiences
Additional Requirements
- BPSS clearance required
- Recognised privacy qualifications such as CIPP/E, CIPM, CIPT or equivalent are highly desirable
- Experience within Government Digital Service (GDS), Central Government or wider public sector environments would be beneficial
- Hybrid working with flexibility to be based in London, Bristol or Manchester
- Occasional attendance at meetings across the three office locations may be required
- No direct line management responsibilities, however applicants must be comfortable operating at senior level and representing the team with key stakeholders
TL;DR
Job Title: Data Protection Lead (Privacy by Design)
Contract Length: 6 Months
Location: London, Bristol or Manchester (Mostly remote)
Rate: £650 per day
IR35 Status: Inside IR35
Clearance: BPSS
Start Date: ASAP
Key Requirement
This is a hands-on privacy practitioner role. Candidates must have recent experience personally leading DPIAs and embedding Privacy by Design within digital delivery and transformation programmes. Strategic DPO profiles without significant hands-on delivery experience are unlikely to be suitable.