Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the Data Protection team, ensuring compliance and protecting personal data.
- Company: Join Arnold Clark, a leading car retailer with over 12.5k employees and 200 locations.
- Benefits: Enjoy hybrid working, generous holiday allowance, private healthcare, and retail discounts.
- Why this job: Make a real impact on data privacy while working in a supportive and inclusive culture.
- Qualifications: Strong background in data protection, excellent communication skills, and leadership potential required.
- Other info: No formal education needed; extensive experience in the field is valued.
The predicted salary is between 42000 - 84000 £ per year.
We are looking for an individual to take a lead role in our Data Protection team. The team is based in the Glasgow HQ and provides oversight and influence over privacy and data protection of the whole Arnold Clark business and its subsidiaries.
We are a mature enterprise with over 12.5k employees, we sell more than 300,000 cars a year and have over 200 locations stretching from Elgin down to Exeter. We are after an individual who is ready to step up in their current role and lead privacy work at scale, however, support of the Data Protection Officer (DPO) and Chief Information Officer (CISO) will be offered, and a great team is already in place.
We offer:
· Hybrid working – on average two days per week in one of our offices (Hillington or Kilbirnie Street in Glasgow)
· Bi-annual bonus
· 33 days’ holiday allowance with room to grow
· Access to training opportunities to grow and develop skills
· Private healthcare
· Generous retail discounts
· Maternity and paternity packages
· …and much more!
Hours
Full time: Monday – Friday, 37.5 hours per week
About the role
Reporting to our CISO, you will play a vital role in protecting the personal data in our custody, while helping to provide an excellent service and commercial offering to our customers. You will work closely with colleagues across various functions and businesses in the Group, as well as suppliers, to ensure we follow the applicable laws and regulations, and working alongside cyber security colleagues make sure relevant data protection controls are in place and effective. Day-to-day duties
· Be the face of privacy and data protection in the business. Liaise with data owners and champions across the business.
· Leading the team on the triage of privacy governance and compliance-related matters.
· Develop and deliver targeted training programmes for data owners and champions in Group policies, principles and practices.
· Oversee the correctness and completeness of our records of data processing activities.
· Ensure that we follow applicable laws and regulations.
· Oversee enforcement of data processing controls in the group.
Essential skills and experience
· Strong background in advising on personal data processing activities at a commercial B2C and/or B2B organisation and handling the personal data of customers or consumers
· Strong working knowledge of the Data Protection legislations including Data (Use and Access) Act 2025 as well as PECR and their implication on retail business
· Experience with privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and Records of Processing Activities (ROPAs)
· Working knowledge of key international data transfer laws
· Leadership and influence skills (prior managerial experience is not required provided these skills can be evidenced)
· Excellent people and communication skills and an ability to explain complex requirements in understandable terms
· Strong analytical and problem-solving skills
· Coaching skills
· Good working knowledge of office productivity packages (word processing, presentations, basic data analytics)
· The ability to use your initiative and take a hands-on approach
· Relevant level of understanding of digital technologies
Nice to have but not essential
· No formal education is required for this role provided extensive experience in the field can be evidenced.
· Qualifications such as CIPP/E and CIPM are desirable but not required.
Our Culture
Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.
To find out more aboutLife at Arnold Clark , visit our website.
Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure check.
#J-18808-Ljbffr
Data Privacy Manager employer: Arnold Clark Group
Contact Detail:
Arnold Clark Group Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Data Privacy Manager
✨Tip Number 1
Familiarise yourself with the specific data protection laws mentioned in the job description, such as the Data (Use and Access) Act 2025 and PECR. Understanding these regulations will not only help you in interviews but also demonstrate your commitment to the role.
✨Tip Number 2
Network with professionals in the data privacy field, especially those who have experience in B2C or B2B organisations. Engaging with industry peers can provide insights into best practices and may even lead to referrals.
✨Tip Number 3
Prepare to discuss your leadership and influence skills during the interview. Even if you haven't held a managerial position, think of examples where you've successfully led projects or initiatives that required collaboration and communication.
✨Tip Number 4
Showcase your analytical and problem-solving skills by preparing case studies or scenarios related to data protection challenges. This will help you illustrate your thought process and how you approach complex issues in the field.
We think you need these skills to ace Data Privacy Manager
Some tips for your application 🫡
Understand the Role: Before applying, make sure to thoroughly read the job description for the Data Privacy Manager position. Understand the key responsibilities and essential skills required, so you can tailor your application accordingly.
Highlight Relevant Experience: In your CV and cover letter, emphasise your experience with data protection legislation and personal data processing activities. Use specific examples that demonstrate your knowledge of laws like the Data (Use and Access) Act 2025 and your ability to lead privacy initiatives.
Showcase Leadership Skills: Even if you haven't held a formal managerial position, highlight instances where you've demonstrated leadership or influence. Discuss how you've coached others or led projects related to data privacy and protection.
Craft a Compelling Cover Letter: Your cover letter should not only express your interest in the role but also reflect your understanding of Arnold Clark's culture and values. Mention how your background aligns with their commitment to diversity and inclusion, and how you can contribute to their goals.
How to prepare for a job interview at Arnold Clark Group
✨Understand Data Protection Legislation
Make sure you have a solid grasp of the relevant data protection laws, especially the Data (Use and Access) Act 2025 and PECR. Be prepared to discuss how these laws impact retail businesses and demonstrate your knowledge during the interview.
✨Showcase Leadership Skills
Even if you haven't held a managerial position, highlight instances where you've influenced or led projects. Discuss how you've motivated teams or driven initiatives related to data privacy, as this role requires strong leadership and influence skills.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving abilities in real-world scenarios. Think about past experiences where you handled privacy governance or compliance issues, and be ready to explain your thought process and outcomes.
✨Communicate Clearly
Since the role involves liaising with various stakeholders, practice explaining complex data protection concepts in simple terms. This will showcase your excellent communication skills and ability to engage with non-experts effectively.
