Privacy Programme Specialist

Requirements

• Minimum 5+ years of substantive experience in data privacy, data protection or a closely related compliance role, with hands-on responsibility for GDPR programme activities
• Strong working knowledge of the UK GDPR and EU GDPR, with the ability to apply regulatory requirements pragmatically in a commercial environment
• Demonstrable experience maintaining RoPAs and reviewing DPIAs
• Practical experience coordinating DSARs and other data subject rights requests, including working with HR and business stakeholders
• Experience managing personal data incidents and maintaining clear, auditable incident records
• Experience developing, coordinating or delivering data privacy training and awareness activities
• Experience reviewing and maintaining privacy policies, procedures and governance documentation
• Proven ability to work across multiple legal entities, business units or acquired organisations and to standardise processes while managing local requirements
• Excellent organisational skills, with the ability to prioritise multiple activities, maintain accurate records and meet regulatory deadlines
• Effective written and verbal communication skills, with the confidence to explain data privacy requirements clearly to stakeholders at different levels of the organisation
• Strong analytical and problem-solving capability, with sound judgement and attention to detail
• Ability to work independently, take ownership of the programme and escalate material risks appropriately
• QUALIFICATIONS & PROFESSIONAL CERTIFICATIONS
• Recognised professional qualification in data privacy or data protection is required, such as CIPP/E, BCS Practitioner Certificate in Data Protection, or an equivalent relevant qualification
• Additional privacy, information governance, risk, compliance or information security qualifications are advantageous
• Ongoing evidence of continuing professional development in data protection and privacy is desirable
• KEY COMPETENCIES & DESIRABLE EXPERIENCE
• Highly organised, methodical and able to maintain accurate governance records
• Clear and credible communicator with strong stakeholder engagement skills
• Pragmatic and solutions-focused approach to interpreting data protection requirements
• High level of integrity, discretion and sound judgement when handling sensitive and confidential information
• Ability to influence stakeholders and drive actions to completion without relying on direct authority
• Strong attention to detail combined with the ability to identify themes, risks and improvement opportunities
• Comfortable operating independently in a part-time role while maintaining clear priorities and dependable follow-through
• Experience of post-acquisition integration or harmonisation of privacy processes across multiple entities is highly desirable
• Experience within a large, operational, services-based or matrixed organisation is advantageous

Benefits

• We’re proud to offer a great range of benefits including:
• 24/7 GP: Both you and your immediate family can speak to a UK-based GP from the comfort of your own home
• Mental Health support and Life Event Counseling
• Get Fit Programme
• Financial and legal support
• Cycle to work scheme
• Access Perks at Work, our innovative employee app where you can find:
• Perks: discounts, gift cards, cashback, and exclusive offers
• Life: Search for resources and tools on topics ranging from family and life to health, money and work
• Support: Online chat or telephone service for urgent support in a crisis
• For more information about ABM’s benefits, visit our

About ABM