Data Protection Expert in London

Want to be part of a UK hub, in a global business that is scaling rapidly, evolving fast and radically changing the decades-old delivery universe? If so, read on, as we’re looking for a Data Protection Expert to join our Legal and Compliance team!

Our mission? To switch up the status quo and become the UK’s leading out-of-home business. With a fast-growing network of thousands of smart lockers, hundreds of leading retail partners and the launch of our transformative Send service, we’re bringing freedom to anyone with a parcel.

At InPost UK, we’re building an unparalleled group of talent that’s committed to help us power our mission to reshape the way parcels move, and redefine eCommerce logistics. Our team is packed full of top-notch experts in e-commerce, technology, scale-up growth, sustainability, logistics and supply chain. We’re a passionate bunch with high ambition – we collaborate, innovate, support each other, and leave egos at the door.

About the role: The Data Protection Expert strengthens privacy and data protection across InPost's UK business, working within the Personal Data Protection Team (Legal, Compliance and GDPR Office). Acting as a trusted privacy advisor, you'll operate independently, build credibility across stakeholder groups, and support the Group Data Protection Officer in meeting the organisation's data protection obligations. You'll also line-manage a Privacy Specialist or Junior Privacy Specialist, and take the lead on complex matters and key escalations alongside senior privacy leadership.

You'll navigate genuinely complex, high-stakes territory — from assessing significant personal data breaches to advising on novel uses of data and AI where there's no established precedent. Working from principles rather than rigid procedure, you'll balance regulatory requirements, business needs and reputational risk, with the backing of senior privacy leadership on the biggest calls. It's a role with company-wide impact, at the heart of how InPost earns and keeps its customers' trust.

What you'll own:

• Personal data risk & incident management — Assess and analyse data-protection risks and personal data breaches, overseeing the incident management process from assessment through investigation to follow-up.
• Data subject requests & stakeholder responses — Handle data subject requests and prepare internal and external responses within regulatory deadlines.
• Data protection documentation & standards — Create, maintain and update registers, procedures, policies and guidelines.
• Training, awareness & privacy engagement — Build subject-matter expertise, run training on specialised topics such as AI, marketing and cybersecurity, drive privacy workshops, and represent the organisation at events.
• Audit & compliance assurance — Conduct internal audits across the Group and support external data-protection audits.
• Regulatory compliance & management reporting — Support the Group DPO in duties arising from applicable data-protection laws and prepare reports and management information for senior leadership.
• Lead & develop the privacy team — Line-manage and develop a Privacy Specialist or Junior Privacy Specialist, handling complex matters and key escalations alongside senior privacy leadership.
• Group-wide privacy initiatives — Participate in global initiatives and collaborate with other markets across the InPost group.

What we need from you: We’re looking for people who are ready for a fast paced environment, get their kicks out of problem solving and can balance getting today's stuff done, whilst building for the future. We’re looking for people with drive and natural curiosity – who want to do things differently. And do them brilliantly.

Key experience needed:

• Good understanding of data protection regulations and principles
• Strong analytical and problem-solving skills, with technical understanding of AI, data systems, security and emerging technologies
• Proficiency in Microsoft Office applications
• Ability to work independently and manage multiple priorities
• Strong organisational, communication and stakeholder management skills, with a proactive, solution-oriented mindset
• Degree in Law, Administration, Compliance, Information Security or a related field
• Experience in legal, compliance or data protection functions
• Additional studies or certifications in data protection, privacy, AI or information security
• Experience delivering training and awareness sessions
• Knowledge of AI governance, cybersecurity or digital marketing compliance
• Certifications such as CIPP/E or CIPM

The InPost process: We pride ourselves on our candidate experience. We want to make this as straightforward as possible, for you and for us! We will try our best to get back to you within a few days to let you know if we’d like to take you to the first stage. This normally involves a 20 minute chat with our Talent Team. If we both feel the connection, you’ll then go through another one or two stages, depending on the level of the role.

At InPost, we love uniqueness. Our strength is our people. We strive to create an open, equal, inclusive environment in which everyone has the opportunity to flourish and be themselves.