> Markdown version of [/jobs/ext/3262627-data-protection-manager-l3-risk-management-cbs-manchester](https://www.wearedevelopers.com/jobs/ext/3262627-data-protection-manager-l3-risk-management-cbs-manchester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Data Protection Manager (L3) - Risk Management - CBS - Manchester - **Company:** Ernst & Young - **Location:** Manchester, UK - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Access, Encodings - **Published:** September 1, 2026 - **Apply:** https://careers.ey.com/talentcommunity/apply/1409935133/?locale=en_GB ## About the Role * Strong ability to plan, prioritise and manage multiple complex workstreams independently. * Excellent commercial acumen, with the ability to balance regulatory requirements and business objectives. * Strong analytical, problem-solving and decision-making capability, operating independently with sound judgement in complex or ambiguous situations. * Clear and authoritative communicator, able to influence and advise stakeholders at all levels, provide effective challenge, including delivering risk-based messages to senior leadership. * Demonstrated ability to lead delivery across complex issues or projects, with accountability for outcomes. * Resilient and flexible, able to operate effectively in a fast-paced and evolving environment, adapting quickly as priorities change. * Calm, professional, positive and resilient under pressure, with a pragmatic and solutions focused mindset. * Work collaboratively within a high-performing team, contributing to wider team objectives and supporting colleagues where needed. * Maintain high levels of accuracy and attention to detail with a commitment to quality. To qualify for the role, you must have * At least four years of relevant professional work experience in data protection, privacy, risk, compliance, legal or a related field * Strong working knowledge of UK data protection and privacy legislation, and a risk-based approach to compliance * Experience handling complex data protection matters and stakeholder engagement * A recognised privacy qualification (e.g. CIPP/E, CIPM, ISEB Certificate, PC.dp or equivalent) Ideally, you will also have * Practical experience applying data protection law in a commercial or professional services environment * Experience working within a regulated industry (e.g. Financial Services or Professional Services) ## Description At Ernst & Young (EY), the Risk Management (RM) function plays a critical role in identifying, managing and mitigating risk across the business. RM supports the firm in upholding EY's business standards, protecting its reputation and value, and ensuring compliance with all applicable legal, regulatory and professional obligations. The UK Data Protection team supports the UK firm in complying with data protection and privacy legislation and regulatory requirements. This includes the development, implementation and ongoing maintenance of data protection policies, standards and procedures, the provision of advice on complex data protection matters, and the delivery of training and awareness to embed effective data protection practices across the business. The team also monitors and oversees the application of Global and local DP policies to ensure continued compliance. The UK Data Protection team sits within Central UK Risk Management, alongside other specialist risk and compliance functions, including Anti-Money Laundering, Financial Crime, Conflicts and Compliance Risk. The Opportunity This is an exciting opportunity to join the UK Data Protection team, supporting EY's compliance with data protection and privacy legislation, including the UK General Data Protection Regulation (GDPR), Data Protection Act 2018, the Data (Use and Access) Act 2025 and Privacy and Electronic Communications Regulations. As a Data Protection Manager, you will act as a senior advisor to the business, leading on complex and high-risk privacy matters and providing clear, pragmatic, and commercially focused guidance. You will combine strong technical expertise with sound judgement to support decision-making, manage risk effectively, and drive the consistent application of data protection practices across the firm. You will operate with a high degree of autonomy, taking ownership of key areas of data protection, leading delivery across multiple workstreams, and contributing to the ongoing development and improvement of EY's privacy risk management framework., * Advisory and Escalation: Act as a senior data protection advisor and escalation point, providing clear, risk-based and commercially pragmatic advice on complex and high-risk matters. * Frontline Compliance Oversight: Lead and oversee key data protection activities, including: + Data subject rights requests + Data incidents and breach investigations (including fact-finding, containment and mitigation) + Privacy and Confidentiality Impact Assessments (PIAs) + Legitimate Interest Assessments (LIAs) + Compliance reviews and health checks * Risk Assessment and Challenge: Review and challenge risk assessments, ensuring appropriate controls, mitigations and governance frameworks are in place. * Framework, Policy and Embedding: Develop, implement and maintain data protection policies, procedures and training to embed compliant and practical privacy practices across the firm. * Delivery and Continuous Improvement: Own delivery across multiple workstreams, ensuring timely, high-quality outcomes while driving continuous improvement in data protection processes. * Stakeholder Management and Influence: Build strong relationships across the business, influencing stakeholders at all levels and providing clear direction on data protection requirements. * Training and Awareness: Deliver training across the business and support embedding a strong privacy awareness culture for all personnel. * Leadership and Contribution: Lead and coordinate complex workstreams and contribute to wider Data Protection initiatives and strategic projects, including supporting the evolution of the firm's privacy framework. ## Related Videos - [Data Driven HR in Europe](https://www.wearedevelopers.com/videos/1489-data-driven-hr-in-europe) - [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage) - [Blazing Accessibility Basics](https://www.wearedevelopers.com/videos/568-blazing-accessibility-basics) - [Beyond Gut Feelings: The Rise of Data-Driven HR](https://www.wearedevelopers.com/videos/1326-beyond-gut-feelings-the-rise-of-data-driven-hr) - [JSON and Beyond](https://www.wearedevelopers.com/videos/968-json-and-beyond) - [WeAreDevelopers LIVE - Gaps in CSS, EU Accessibility Act and more!](https://www.wearedevelopers.com/videos/1314-wearedevelopers-live-gaps-in-css-eu-accessibility-act-and-more) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)