At a Glance
- Tasks: Ensure GDPR compliance and data protection across our systems and processes.
- Company: Join Mitchells & Butlers, a leader in the hospitality industry with over 1,600 venues.
- Benefits: Enjoy flexible hours, 33% discount at all brands, and comprehensive health benefits.
- Other info: Hybrid role based in Birmingham with excellent career growth opportunities.
- Why this job: Make a real impact on data protection while working in a dynamic, inclusive environment.
- Qualifications: 3+ years in GRC or data protection; strong analytical and communication skills required.
The predicted salary is between 35000 - 45000 £ per year.
We have an exciting opportunity for a GRC Analysts – Data Protection & GDPR Compliance to join our award‑winning Business Change and Technology (BC&T) team on a 12‑month Fixed Term Contract. You will be based in Birmingham City Centre, working in a hybrid role. Reporting to the IT Licensing & Compliance Manager, these roles support Mitchells & Butlers’ governance, risk, and compliance (GRC) activities, with a strong focus on information security, privacy, and regulatory assurance across the organisation.
This specialism focuses on data protection assurance and GDPR compliance, ensuring personal data is processed lawfully, proportionately, and in line with regulatory and organisational requirements.
You will be well rewarded:
- 35 hours per week, Monday to Friday, with flexibility around personal commitments.
- 33% discount across all M&B brands and hotels.
- A pension that pays, with contributions matched at 1.5x, up to 5%.
- Private healthcare, dental plan, cycle‑to‑work, and keep‑fit schemes.
- 26 days annual leave plus bank holidays.
Key responsibilities include:
- Reviewing how personal data is used across M&B systems, business processes, and technology solutions.
- Assessing and documenting PII risks, gaps, and recommended actions in line with GDPR, the UK Data Protection Act, and M&B risk management processes.
- Ensuring data minimisation principles are applied by identifying unnecessary collection, processing, or retention of personal data.
- Constructively challenging business teams where personal data processing is excessive or insufficiently justified.
- Identifying opportunities to reduce, anonymise, or eliminate personal data processing where it is not essential to business needs.
- Maintaining visibility of personal data usage, including data classification, sensitivity, and lifecycle controls.
- Providing clear, pragmatic risk assessments and guidance to business stakeholders on personal data processing.
Governance, Risk & Compliance:
- Support the review, development, and rollout of information security and data protection policies.
- Contribute to the management of information security, third‑party, and privacy risk registers.
- Produce compliance reports, dashboards, and metrics for management and senior stakeholders.
- Assist with internal and external audits, including GDPR assurance, PCI DSS, and financial audits.
- Support control reviews, evidence gathering, and policy adoption across the organisation.
- Maintain clear, accurate, and auditable compliance documentation.
Security & Privacy Operations:
- Track remediation of identified security, privacy, and compliance issues to ensure timely closure.
- Support incident and breach response activities, including investigation, documentation, and follow‑up actions.
- Review and document business, data, and supplier processes to support governance, risk, and compliance activities.
- Provide clear, auditable documentation to evidence risk decisions, approvals, and outcomes.
What you’ll need to bring:
- Strong understanding of GDPR, the UK Data Protection Act, and privacy and security control requirements.
- Experience working in GRC, information security, data protection, supplier assurance, or a related compliance role.
- Ability to interpret and assess technical and organisational controls.
- Strong analytical skills with excellent attention to detail.
- Confident written and verbal communication skills, able to engage across legal, technical, and operational teams.
- Experience contributing to incident or breach investigations.
- Ability to manage multiple competing priorities and constructively challenge established processes.
Qualifications:
- Minimum 3 years’ experience in a relevant role.
- CIPP/E, CIPM, CompTIA Security+, or BCS Practitioner Certificate in Data Protection desirable.
What makes Mitchells & Butlers a great place to work? At M&B, a career isn’t just about clocking in. We care about our people and value every contribution from a diverse workforce that reflects our guests and communities. By fostering a culture of inclusion, respect, and collaboration, we create an environment where colleagues can thrive and deliver great guest experiences.
At M&B we value the unique perspectives each person brings. We believe that by fostering a culture of inclusion, respect, and allyship, we create a sense of belonging, engagement and teamwork which are essential to delivering great guest experiences. Join us and be a part of a great team.
Closing date: Monday 25th May 2026 11:59pm
IT in Birmingham employer: Mitchells & Butlers
At Mitchells & Butlers, we pride ourselves on being an exceptional employer, offering our Head Chef the chance to lead a passionate team in a vibrant kitchen environment at the Royal Oak Oxford. With a strong focus on professional development, competitive bonuses, and industry discounts, we foster a supportive culture that encourages creativity and growth, making it an ideal place for culinary professionals to thrive.
StudySmarter Expert Advice🤫
We think this is how you could land IT in Birmingham
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like Mitchells & Butlers looking for candidates who are engaged and informed.
We think you need these skills to ace IT in Birmingham
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at Mitchells & Butlers. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at Mitchells & Butlers
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with Mitchells & Butlers’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
