Privacy Programme Specialist

Role overview

Location

• The role description lists Heathrow as the location.

Working pattern

• The role is part-time: three days per week or condensed working hours across five days.
• The stated shift pattern is 45 hours per week, Monday to Friday.

Privacy governance and records

• Manage programme activities and maintain governance ownership, records, controls, actions and reporting.
• Coordinate current Records of Processing Activities and validate their contents with business owners.
• Identify record gaps and drive remediation.

Assessments and individual rights

• Review and support DPIAs for changes involving personal data, guide risk mitigation and maintain auditable records.
• Coordinate DSARs and other individual rights requests and ensure timely, quality-controlled handling.
• Guide evidence gathering, redaction, exemptions and responses; escalate complex matters.

Incidents, training and policy

• Manage personal data incidents and suspected breaches through assessment, investigation, containment, remediation and closure.
• Coordinate incident stakeholders, maintain records, track lessons learned and escalate where required.
• Arrange annual HR privacy training and additional targeted training; maintain records and review training content.
• Review and update GDPR and privacy policies, procedures, guidance and supporting documents.

Acquired-company alignment

• Align privacy processes and controls across acquired companies in Ireland with local requirements.
• Identify legacy practices, documents and controls requiring harmonization and manage the related actions.

Salary

• Salary is described as competitive; no amount or pay cadence is stated.

Requirements

• Experienced data privacy specialist able to manage and continuously improve a UK and Ireland privacy programme.
• Ability to support compliance with UK GDPR and, for the Republic of Ireland, EU GDPR, and applicable internal policies and procedures.
• Ability to provide practical guidance to business stakeholders and coordinate privacy governance, individual rights requests, incidents and training.
• Ability to align privacy processes and controls across acquired Irish companies while recognizing local requirements.