> Markdown version of [/jobs/ext/3032397-data-protection-manager](https://www.wearedevelopers.com/jobs/ext/3032397-data-protection-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Data Protection Manager

- **Company:** East Midlands
- **Location:** Derby, UK
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Sharing, Decision Support Systems, Information Lifecycle Management, Privacy Controls, Data Processing, ISO-14001
- **Published:** September 23, 2026
- **Apply:** https://jobs.eastmidlandsrailway.co.uk/display.aspx?id=1253&pid=0&tabId=230

## About the Role

We're looking for a confident and capable individual who brings:
o Certified Information Privacy Professional/Europe (CIPP/E) or a BCS Practitioner certificate
o Knowledge of UK GDPR, Data Protection Act 2018, PECR, ICO guidance, and information security principles. Desirable certification in Data Protection
o Understanding of privacy by design, information lifecycle management, data sharing, and supplier governance.
o Experience managing DPIAs, Data Subject Rights Requests, personal data breaches, and privacy risk assessments.
o Experience reviewing commercial contracts, Data Processing Agreements (DPAs), and Data Sharing Agreements.
o Experience producing Board-level reports and performance metrics to provide compliance assurance to senior leadership.
o Ability to interpret complex legislation and translate it into strategic, risk-based, and proportionate business solutions.
o Excellent communication (written and verbal), negotiation, and influencing skills to challenge and advise confidently at all organisational levels and committees within a diverse workforce.
o Experience of leading a GDPR governance programme (continuous improvement against minimum standards)

## Description

Ten times accredited as a Top Employer and Gold accredited for Inclusive Employers Standards, we value our people and are dedicated to making sure that everybody feels empowered to bring their authentic self to work.
At EMR we want to proactively embrace diversity across our workforce and recognise that we are under-represented in some areas. We're therefore taking positive steps to promote a positive and inclusive culture and we welcome applications from everyone to help us better represent our communities.
We have an exciting opportunity to join #TeamEMR as a Data Protection Manager.
This pivotal role leads and manages EMR's privacy framework to ensure full compliance with the UK GDPR, the Data Protection Act 2018, and related legislation. Providing expert, pragmatic advice and, embedding privacy by design across all business processes, and promote a strong internal culture of accountability and compliance.
Key Roles and Responsibilities
Data Protection Strategy & Governance - Own the organisation's data protection and privacy framework, ensuring compliance with UK GDPR, the Data Protection Act 2018, PECR and related legislation, and that policies, procedures and standards remain current and effective.
Advisory & Decision Support - Act as the organisation's principal source of data protection expertise, advising senior leadership and project teams on complex privacy matters, challenging proposals where risks or non-compliance arise, and embedding privacy by design across change initiatives and DPIAs.
Individual Rights & Breach Management - Own the end-to-end handling of data subject rights requests and personal data breaches, ensuring both are managed lawfully, efficiently and within statutory timescales, with regulatory notification where required.
Information Governance & Third-Party Assurance - Maintain oversight of the organisation's records of processing activities, and ensure data protection provisions are properly reflected in contracts, data processing and data sharing agreements with suppliers and partners.
Assurance, Risk & Retention - Provide ongoing assurance that data protection risks are identified, assessed and mitigated, that compliance actions are implemented, and that a robust retention and disposal framework keeps personal data held only as long as necessary and disposed of securely.
Culture, Capability & Awareness - Build organisational capability and awareness through training and campaigns, ensuring managers and stakeholders understand their responsibilities and a culture of privacy and accountability is embedded.
Regulatory Horizon Scanning - Monitor developments in data protection law, regulatory guidance and best practice, translating these into practical recommendations for the organisation.
Reporting & Governance Assurance - Produce accurate, timely reporting and management information for senior leadership, governance committees and the Board, providing assurance on compliance performance and the effectiveness of the data protection framework.
Stakeholder & Group Relationships - Build effective relationships with internal stakeholders, regulators and the Group Data Protection Officer, ensuring alignment with group-wide privacy strategy and consistent application of standards, and acting as or supporting the DPO role where required.
The above list is not exhaustive, and on occasion, the role may need to undertake other reasonable requests as required by their line manager, in line with grade and competence
All staff have a responsibility and accountability to ensure that their day-to-day activities support our commitments under the Sustainability Policy Statement and relevant management systems (e.g. ISO14001 or ISO50001); and to act in a sustainable manner and minimise impact on the environment., Please be advised that all responses to questions on this application form will be carefully monitored for indications of AI assistance. It is important to us that you are being your authentic self so please base your answers on your personal knowledge and experience.
Any detected use of AI-generated content will result in disqualification from the application process. We value integrity and transparency in all applications and appreciate your cooperation in maintaining these standards.
Supporting Our Frontline
If you're successful in this role, you'll be expected to support our frontline colleagues at some points throughout the year. This might be undertaking safety critical work, for which you'll receive training, but it could just be helping out with Customer Service when our stations are busy. We're One Team, and that means our managers step up for the frontline, not just manage from a distance. Supporting frontline colleagues is part of our DNA at EMR.
We welcome applicants from diverse backgrounds, we promote equal opportunities for all. East Midlands Railway is a non-discriminatory employer committed to the recruitment and promotion of all on the basis of ability and merit irrespective of disability, race, gender, health, social class, sexual preference, marital status, nationality, religion, employment status or age. We'll treat your application fairly and assess you for the job based on merit and skills.


## Related Videos

- [Beyond Gut Feelings: The Rise of Data-Driven HR](https://www.wearedevelopers.com/videos/1326-beyond-gut-feelings-the-rise-of-data-driven-hr)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Smart City, Smart Mobility](https://www.wearedevelopers.com/videos/954-smart-city-smart-mobility)
- [Secure and Private AI - DeepMask](https://www.wearedevelopers.com/videos/1665-secure-and-private-ai-deepmask)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Building Accountability in Agentic AI](https://www.wearedevelopers.com/videos/100046-building-accountability-in-agentic-ai)

## Related Articles

- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)