Data Governance and Risk Manager in Cambridge

We are currently looking for a Data Governance and Risk Manager to join the Data Protection team. The role will lead and support our data protection, privacy, information governance, and risk management activities across the organisation. Reporting to the Data Protection Officer (DPO), you will play a key role in ensuring compliance with UK and European data protection legislation, managing organisational risks, and promoting a strong culture of governance and accountability.

Key Responsibilities

• Manage data protection activities, including risk assessments, breach reporting, DSARs, DPIAs, and Records of Processing Activities (RoPA).
• Monitor and report on data protection and business risks, providing regular reports and recommendations.
• Support the review and implementation of data protection policies and compliance initiatives.
• Deliver training, guidance, and awareness programmes across the organisation.
• Drive effective risk management practices across the business.
• Identify emerging risks and work with stakeholders to develop mitigation strategies.
• Treat all students and staff with dignity, building relationships rooted in mutual respect.
• Have regard for the need to safeguard students' well-being, developing and maintaining a full understanding of current policies and procedures.
• Show tolerance of and respect for the rights of others.
• Maintain high standards of attendance and punctuality.
• Help to create and maintain a safe working environment for everyone.

Person Specification

Education

• Educated to Degree Level or above (or equivalent).
• Possess relevant Data Protection, Information Governance and/or Risk Management qualification (such as IAPP or BCS (desirable but not essential)).
• Track record of attending workshops, events and webinars to support learning.

Experience

• Expertise in national and European Data Protection Laws and practices, including an in-depth understanding of the DPA 2018 and the EU GDPR.
• Experience of working in complex organisations with multi-national Data Protection exposure.
• Knowledge of the Higher Education sector would be an advantage.
• Experience of Risk Management and Information Governance (including, but not limited to knowledge and/or experience with ISO27001 or equivalent).
• Experience in supporting DSARs.

Skills

• Excellent written and verbal communication skills.
• Ability to plan, organise and prioritise tasks and projects.
• Ability to facilitate meetings with internal and external stakeholders.
• Ability to conduct technical discussions in simple terms.
• Understanding of Information Technologies and Data Security.
• Ability to promote a Data Protection culture within CEG.

Benefits (UK)

• Perkbox (hundreds of discounts on brands).
• Employee Assistance Program (EAP) – caring and compassionate support plus a dedicated Mental Health Support Network.
• Private Medical.
• Life Assurance.
• Cycle to work scheme.
• Car Leasing.
• Discounts with childcare providers during school holidays.
• Staff discount on CEG Digital courses.
• Mentoring scheme.
• Enhanced annual leave.

CEG is committed to safeguarding and promoting the welfare of children and vulnerable adults and expects all colleagues to share this commitment. All successful candidates will undergo background checks in the required countries. Where roles have direct contact with children, including all OnCampus centre-based roles, this will include ID, qualification and reference checks, criminal record checks including an Enhanced Disclosure (or equivalent) in line with safeguarding requirements and our Safeguarding and Prevent Policy (including Children Protection). Any offer of employment is subject to all checks being satisfactory. The Company also expects all colleagues to share the Company's commitment to Equal Opportunities within the workplace.