Senior Data Protection Manager and Deputy Data Protection Officer

Senior Data Protection Manager and Deputy Data Protection Officer

Full Time - 35 hours

London – hybrid 50%

At Just we encourage a flexible and agile working environment for the majority of our opportunities. Get in touch with us to discuss in more detail.

Who are Just?

We help people achieve a better later life. That’s our purpose and it’s the reason we exist. We are a fast-growing FTSE 250 company helping customers enjoy the retirement they deserve. We do this through a variety of market leading, award-winning products and services, delivered by a diverse team of over 1,400 purpose-led colleagues who genuinely put the customer at the heart of everything we do.

This is a brilliant time to join our business. We are on an exciting growth journey to become the UK’s most loved retirement expert.

Purpose

We’re looking for a Senior Data Protection Manager & Deputy Data Protection Officer to help lead and shape our organisation’s data protection strategy. This is a key, business-facing role with significant responsibility, including supporting the Group DPO and providing strategic oversight across data protection operations.

You’ll play a central role in ensuring we meet our legal and regulatory obligations under GDPR, the Data Protection Act 2018, ISO27001, and other relevant frameworks. You’ll also work closely with senior stakeholders, providing expert guidance and translating complex privacy requirements into clear, practical advice.

Key Accountabilities

• Support strategic data protection planning alongside the Group DPO, including representing the function in governance forums and during DPO absence.
• Lead day-to-day operations of the Data Protection Team, including workload management, team stand-ups, and quality assurance.
• Manage key privacy processes, including DPIAs, ROPAs, client rights requests, and incident response procedures.
• Provide expert advice to business teams, helping embed privacy by design into strategic initiatives and projects.
• Act as a point of contact for senior and executive stakeholders, offering risk-based guidance on privacy and compliance.
• Contribute to policy development, training, and awareness programmes to maintain a strong culture of privacy and accountability.
• Monitor regulatory developments and identify opportunities to improve our data protection programme.
• Collaborate with Information Security to ensure privacy and security risks are managed in alignment.
• Manage a team of 3-5 Data Protection Specialists

Examples of Key Activities

• Engage regularly with stakeholders across meetings, steering committees, forums, and projects
• Act as the data protection lead on key initiatives and assess compliance with privacy controls
• Review and approve DPIAs, and oversee the accuracy of ROPAs
• Provide expert guidance on GDPR, data sharing, retention, and lawful processing
• Support incident response by evaluating privacy risks and coordinating follow-up actions
• Conduct research on regulatory developments and update reports and committee packs
• Collaborate with Information Security to align on risk mitigation and controls
• Prepare briefing materials for senior leadership and governance forums
• Lead team stand-ups, manage workflow, and support the development of internal guidance
• Deputise for the Group DPO during absences, including representing the function at senior forums and signing off on key decisions

Qualifications

Essential

• Bachelor's degree in Data Protection, Law, Cybersecurity, Information Technology, or related field
• Professional certification such as CIPP/E, CIPM, or ISO27001 Lead Implementer

Skills and Knowledge

• In-depth understanding of GDPR, DPA 2018, ISO27001, and related standards
• Strong leadership, communication, and interpersonal skills
• Ability to influence and engage senior stakeholders
• Analytical and problem-solving mindset with strategic vision
• Proactive, organised, and outcome-focused

Experience

• Proven experience data protection role, typically 8–10+ years
• Experience leading a data protection function or team
• Track record managing DPIAs, ROPAs, and incident response
• Strong engagement with senior stakeholders and governance bodies
• Familiarity with integrating data protection into enterprise-level initiatives

Company Benefits

• A Competitive Salary, Pension Scheme and Life Assurance
• Along with 25 Days Annual Leave plus an Additional Day on us for your Birthday
• Private Medical Cover and Income Protection, just in case
• A generous and highly achievable bonus scheme – paid annually based on individual and company performance against targets
• Opportunity to progress within your career both in-role and within the company
• FREE access to the Headspace App, a 24/7 Employee Assistance Helpline and Trained Physical & Mental Health First Aiders (On-Site)
• A variety of Employee Funded Benefits available to you via our Online Benefits Portal
• Plus, several additional purchase options available for you and your loved ones

Why Just?

At Just you’ll have the opportunity to develop your career, whilst making a difference to the lives of those around you. You’ll be part of a company with a strong and distinctive culture - we’re ambitious, curious and collaborative – and every decision we make centres around being Just and delivering the best outcomes for our customers.

We’re committed to building a more sustainable business, and we’re working hard to make progress against our Net Zero targets. We're reducing our reliance on fossil fuels in our offices, switching to more sustainable sources of energy and we're investing more of our money in green and social assets.

Valuing diversity of thought and fostering a sense of belonging is critical to our business success, driving innovation and balanced decision making. Our work on DEIB (Diversity, Equity, Inclusion and Belonging) aims to deliver a brilliant employee experience underpinned by a sense of belonging, where our people feel proud to work at Just. We remain committed to our publicly disclosed HM Treasury Women in Finance Charter and Race at Work Charter targets and support a wide range of employee network and events, championing issues including intergenerational working, social mobility and neurodiversity.

Be Bold. Be Brilliant. Be Just.