Data Protection Specialist in City of Westminster

Allwyn Group is a multi-national lottery operator with a market-leading presence in Austria, the Czech Republic, UK, Greece, Cyprus, Italy and USA. Allwyn became the operator of the UK National Lottery in February 2024. Over the next two years we are embarking on an ambitious journey to revolutionise the global lottery category. This is a once-in-a-lifetime opportunity for people from within and outside the lottery and entertainment industry to join us and play a part in accelerating Allwyn’s growth.

To support this journey, Allwyn is looking for a Data Protection Specialist to join our Regulatory Affairs & Compliance team in London, which sits under the wider Legal Department. This role is a great opportunity for an experienced privacy professional who enjoys combining strong legal knowledge with practical, business-focused solutions. You’ll work closely with our Group Data Protection Officer & Head of Data Protection, helping to strengthen and scale our privacy framework across Allwyn.

What you’ll do:

• Support the implementation of privacy management tools, including workflows, templates, and user guidance.
• Draft clear and practical privacy advice, notices, training and awareness materials.
• Coordinate DPIAs and other risk assessments from scoping through to completion.
• Review supplier due diligence and data processing agreements, identifying gaps and potential risks.
• Maintain privacy governance records and support day-to-day privacy operations.
• Work on cross-market and HQ-led projects involving multiple stakeholders and third parties.
• Identify privacy risks and escalate key issues to the Group DPO & Head of Data Protection, when needed.
• Monitor regulatory developments (GDPR, ePrivacy, AI, international privacy laws) and translate them into practical updates.
• Contribute to improving privacy processes, templates and governance to make the function more scalable.
• Gradually take ownership of privacy workstreams.

What do you need to succeed?

• 4+ years of experience in data protection in a commercial environment.
• Experience in a regulated industry is essential.
• Strong knowledge of UK/EU GDPR and experience applying it in practice (exposure to US or other international privacy frameworks is a plus).
• Degree in law, data protection, technology or a related field, privacy certification (e.g. CIPP/E, CIPM, CIPT) is a plus.
• Knowledge of AI governance is an advantage.
• Experience drafting privacy documents (e.g. DPIAs, privacy notices, policies, guidance) is essential and reviewing data processing agreements.
• Experience working with or implementing privacy management tools or training/awareness platforms.
• Confidence working with stakeholders across Legal, Tech, Product, and People&Culture teams.
• Ability to work independently to a certain extent, make informed decisions, and know when to elevate concerns.
• High attention to detail, strong analytical skills, and resilience in a fast-moving environment.

What do we offer:

• Stable job in a collaborative, friendly and international team culture.
• Annual performance-based bonus.
• 25 days of vacation.
• Additional benefits – pension contribution, life assurance, private medical insurance scheme etc.
• Company events (health days, number of sports events sponsored by Allwyn).
• Privacy and data protection development, including attendance at industry events, conferences and workshops.
• Work equipment: Company Laptop, Company mobile phone + SIM Card & package of mobile data also for personal use.
• Office located directly in the centre of London, close to Bond Street underground station.

Does this opportunity sound exciting to you? Then we would love to hear from you!