Overview
We're looking for a technically strong data specialist to advance how we deliver high‑impact, insight‑driven oversight within the Data Privacy, Retention & Records Management Risk team.
This is not a traditional privacy or programme delivery role. It is suited to someone who understands how data is structured, processed and controlled in real systems, and can use that expertise to assess how data use translates into real privacy and customer outcomes.
You'll operate at the forefront of how we evolve oversight by bringing deeper technical interrogation, clearer insight, and stronger evidence of how risks manifest in practice. This includes assessing how intrusive data processing is within real implementations, how code and models influence automated decision‑making (ADM) and customer outcomes, and whether data structures and architecture support proportionate, non‑invasive processing.
Working with Senior Managers and the Head of Function, you’ll apply and continuously improve analytical methods, tooling and repeatable routines that increase the quality, consistency and impact of oversight.
Key Responsibilities
- Insight‑Led & Thematic Oversight (Primary Focus)
- Conduct targeted thematic analysis to assess how data practices translate into real privacy and customer outcomes.
- Interrogate code, data pipelines and models to understand:
- The level of intrusion in processing.
- Impact on automated decision‑making and customer outcomes.
- Alignment with principles of proportionality and data minimisation.
- Identify where controls are ineffective in practice, providing clear, evidence‑based challenge.
- Produce concise, high‑impact insight that drives tangible improvement in business practices.
- Data Lifecycle, Architecture & DPIA Review
- Assess how data is collected, structured, transformed and retained within real systems and architectures.
- Play a key role in reviewing Data Privacy Impact Assessments (DPIAs) by interrogating the underlying data architecture, code and processing logic.
- Test whether risks and controls reflect actual system behaviour.
- Conduct structured quality assurance of DPIAs, identifying gaps between documented intent and technical reality.
- Develop and implement automation of repeat oversight activities, including scalable QA routines.
- Risk Insight & Practical Challenge
- Deliver focused, technically grounded challenge on data privacy risks, based on how systems and data operate in practice.
- Translate technical findings into clear, outcome‑driven risk insights for business stakeholders.
- Support incident and issue analysis, focusing on root cause and control effectiveness.
- Collaboration & Influence
- Work closely across CCOR, Legal, Engineering and Data teams to ensure oversight is credible, practical and well‑evidenced.
- Influence stakeholders through clarity of insight rather than process ownership.
Ways of Working
- Confident operating as a technical and analytical specialist within a senior team.
- Able to challenge constructively and influence across technical and non‑technical audiences.
- Strong communication skills, with the ability to make complex ideas clear and actionable.
Applying Technical Expertise to Oversight
- Ability to assess how technical design decisions (code, models, structure) impact privacy and customer outcomes.
- Experience interrogating systems to understand how data is actually used, not just how it is described.
- Comfortable reviewing artefacts such as DPIAs from a technical and data architecture perspective.
- Strong focus on insight, challenge and evidence, rather than programme delivery or reporting production.
- Experience driving automation and repeatability in analytical or oversight activities.
Qualifications
- Hands‑on understanding of how data is structured, processed and controlled across the lifecycle.
- Experience working with data pipelines, models and architectures in production environments.
- Ability to read and challenge code (e.g., SQL, Python) and assess how logic translates into outcomes.
- Strong understanding of data structures, metadata and how data is organised for analytics and data products.
- Familiarity with AI/ML concepts and how they influence data usage and control design.
Inclusion & Equality
We are a Disability Confident Leader and guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long‑term health or neurodivergent condition through the Disability Confident Scheme.
We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers and offer a wide-ranging benefits package.
Benefits
- A generous pension contribution of up to 15%
- An annual performance‑related bonus
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 30 days' holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
