Job Summary : Technical Lead
We are looking for a resource with strong hands-on experience in GDPR, data privacy, and data protection.
The candidate will lead technical programs supporting UK GDPR compliance, working closely with Privacy, Legal, Security, Engineering, Product, and Business teams.
Key Responsibilities
-
Lead end-to-end technical programs focused on GDPR and data privacy.
-
Manage program roadmaps, timelines, milestones, risks, dependencies, and governance.
-
Drive data mapping, data flow analysis, RoPA, DPIA, and GDPR compliance initiatives.
-
Partner with engineering teams to implement data retention, deletion, consent, DSAR, data minimization, and privacy controls.
-
Support privacy incident response, audits, compliance assessments, and remediation.
-
Manage third-party/vendor privacy risks and data protection requirements.
-
Track program KPIs and provide regular updates to senior leadership.
-
Drive Privacy by Design and Privacy by Default across technology initiatives.
Must-Have Skills
-
Strong hands-on experience with UK GDPR and data privacy programs.
-
Good knowledge of Data Protection Act 2018, DPIA, RoPA, DSAR, consent, data retention, data minimization, and lawful basis.
-
Experience managing technical programs involving privacy, compliance, or data protection.
-
Strong stakeholder, risk, dependency, and governance management skills.
-
Good understanding of cloud platforms, IAM, encryption, DLP, data classification, and data lifecycle management.
-
Experience working with Agile/Scrum and SDLC/DevSecOps environments.
-
Familiarity with tools such as Jira, Confluence, Azure DevOps, or Microsoft Project.
Good to Have
-
Experience with EU GDPR, ISO 27001/27701, NIST Privacy Framework, SOC 2, or PCI DSS.
-
Experience with regulatory audits and third-party privacy assessments.
Total Experience Expected: 06-08 years
