> Markdown version of [/jobs/ext/4156488-group-data-protection-executive-9-month-ftc](https://www.wearedevelopers.com/jobs/ext/4156488-group-data-protection-executive-9-month-ftc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Group Data Protection Executive - 9 month FTC

- **Company:** K3 Advisory Group
- **Location:** United Kingdom (Remote available)
- **Experience:** Starter
- **Salary:** £62,028
- **Contract:** Temporary contract
- **Skills:** Artificial Intelligence, Data Mapping, Operational Data Store, Microsoft SharePoint, Workflow Management Systems, Data Processing
- **Published:** October 27, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5942955214

## About the Role

Essential

 * 1-3 years' practical data protection, compliance, legal operations or privacy experience
 * Hands-on experience handling or materially supporting DPIAs, DSARs, breach logs or supplier privacy due diligence
 * Working knowledge of the UK GDPR, the Data Protection Act 2018, PECR and the current UK data protection regime
 * Strong drafting, organisation, stakeholder management and document-review skills
 * Ability to manage deadlines, sensitive information and competing requests across multiple businesses, and maintain registers, trackers, MI and audit evidence

Desirable

 * IAPP CIPP/E, CIPM, BCS or equivalent privacy qualification (or active progress towards one)
 * Experience in professional services, financial services or a multi-entity group
 * Exposure to DPA negotiation, international transfers, AI governance or privacy-by-design reviews
 * Familiarity with SharePoint, workflow tools and data-mapping or privacy-management platforms

## Description

Our Data Protection function sits within Group Legal and is responsible for delivering and maintaining the Group's data protection framework across all Group businesses., DPIAs and privacy by design

 * Operate the DPIA screening process and maintain the central DPIA register
 * Review screening questionnaires and identify when a full DPIA is required
 * Facilitate assessments with project and business teams, documenting processing, necessity and proportionality, risks, mitigations, owners and review dates
 * Escalate high residual risk, novel processing, international transfers, AI use, special-category data and proposed prior consultations to the Group DPO

Data subject rights requests

 * Log, acknowledge and coordinate DSARs and other rights requests
 * Agree search scope with relevant business areas, maintain response timetables and track disclosure materials
 * Support the review, redaction and preparation of responses

Personal data breaches

 * Receive and triage incidents promptly
 * Coordinate containment, fact gathering, investigation records and root-cause analysis
 * Maintain the breach register and notification timetable

Supplier and DPA reviews

 * Conduct first-pass reviews of data processing agreements and supplier privacy due diligence
 * Check core Article 28 UK GDPR requirements, including security evidence, sub-processors, international transfers, breach assistance, audit rights and exit arrangements

Governance, advisory and awareness

 * Support ROPA, data mapping, policy updates and privacy champion engagement
 * Act as point of contact for routine operational data protection queries from the Group's non-regulated businesses
 * Monitor legislative and regulatory developments and propose updates to templates and processes for Group DPO approval