Group Data Protection Executive - 9 month FTC

Our Data Protection function sits within Group Legal and is responsible for delivering and maintaining the Group’s data protection framework across all Group businesses., DPIAs and privacy by design

• Operate the DPIA screening process and maintain the central DPIA register
• Review screening questionnaires and identify when a full DPIA is required
• Facilitate assessments with project and business teams, documenting processing, necessity and proportionality, risks, mitigations, owners and review dates
• Escalate high residual risk, novel processing, international transfers, AI use, special-category data and proposed prior consultations to the Group DPO

Data subject rights requests

• Log, acknowledge and coordinate DSARs and other rights requests
• Agree search scope with relevant business areas, maintain response timetables and track disclosure materials
• Support the review, redaction and preparation of responses

Personal data breaches

• Receive and triage incidents promptly
• Coordinate containment, fact gathering, investigation records and root-cause analysis
• Maintain the breach register and notification timetable

Supplier and DPA reviews

• Conduct first-pass reviews of data processing agreements and supplier privacy due diligence
• Check core Article 28 UK GDPR requirements, including security evidence, sub-processors, international transfers, breach assistance, audit rights and exit arrangements

Governance, advisory and awareness

• Support ROPA, data mapping, policy updates and privacy champion engagement
• Act as point of contact for routine operational data protection queries from the Group’s non-regulated businesses
• Monitor legislative and regulatory developments and propose updates to templates and processes for Group DPO approval

Essential

• 1-3 years’ practical data protection, compliance, legal operations or privacy experience
• Hands-on experience handling or materially supporting DPIAs, DSARs, breach logs or supplier privacy due diligence
• Working knowledge of the UK GDPR, the Data Protection Act 2018, PECR and the current UK data protection regime
• Strong drafting, organisation, stakeholder management and document-review skills
• Ability to manage deadlines, sensitive information and competing requests across multiple businesses, and maintain registers, trackers, MI and audit evidence

Desirable

• IAPP CIPP/E, CIPM, BCS or equivalent privacy qualification (or active progress towards one)
• Experience in professional services, financial services or a multi-entity group
• Exposure to DPA negotiation, international transfers, AI governance or privacy-by-design reviews
• Familiarity with SharePoint, workflow tools and data-mapping or privacy-management platforms

• Negotiable basic salary pro rated £30,000 - £40,000 depending on experience
• A collaborative, purpose-driven working environment within a growing Group
• Exposure to a broad range of data protection matters across multiple business lines
• The opportunity to work closely with experienced legal and compliance professionals
• Hybrid or fully remote and flexible working arrangements

K3 Advisory Group is a private equity backed advisory and professional services group providing expert advisory across Business Sales, Tax, Restructuring, Technology Solutions, and Financial Services.