Group Data Protection Compliance Manager

Marks and Spencer plc (UK)
London, UK
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Artificial Intelligence Cyber Security Data Processing

Job description

At Marks & Spencer, trust is at the heart of everything we do. As Group Data Protection Compliance Manager, you will play a key role in maintaining that trust by shaping and maintaining our group-wide data protection compliance framework. Sitting within our central Data Protection (DPO) Team and Legal function, this role works at the intersection of risk, compliance and innovation.You will partner closely with colleagues across the business to ensure data protection risks are well managed and clearly understood, enabling M&S to continue its digital transformation and drive responsible use of data and Artificial Intelligence. This is a brilliant opportunity to apply your expertise in a role that has genuine impact across the Group, while working in a collaborative, supportive and purpose-driven environment. All the detailsWhat You’ll Do Key accountabilities will include: To maintain and enhance our data protection compliance framework, ensuring different elements work together effectivelyLead and support group-wide data protection risk management, ensuring risks are consistently identified, assessed, tracked and reported in line with our risk appetiteDevelop, enhance and deliver clear, insightful compliance reporting and metrics for senior business partners, committees and governance forumsMaintain and evolve data protection policies, procedures and governance processes to ensure they remain robust, practical and sustainableSupport effective monitoring, assurance and audit activity to assess the design and operation of data protection controls across the GroupDrive improvements to data processing records, DPIAs and third-party due diligence, working collaboratively with Risk, Information Security and business teams Who You Are Your skills and experience will include

Requirements

Strong experience working in a data protection or privacy role, with deep knowledge of UK data protection law and regulationProven ability to manage and advise on data protection risk in a complex, fast-moving organisationConfidence providing pragmatic, solutions-focused advice to a wide range of business partnersExperience contributing to governance, reporting, monitoring or assurance activitiesData protection qualifications such as IAPP CIPP/E, CIPM or equivalent is desirable, but we also welcome candidates with equivalent practical experience

About the company

What’s in it for you? Working at M&S means being part of something bigger - helping to deliver quality, value and service to millions of customers every day. We’re inclusive, fast-moving and always evolving, with a strong sense of purpose and a focus on doing the right thing. Here are just a few of the benefits that make working here even more rewarding: 20% colleague discount on all M&S products and many third-party brands for you and someone in your household, available once you’ve completed your probationCompetitive holiday allowance with the option to buy moreDiscretionary bonus schemes linked to your performance and oursStrong pension and life assurance to help plan for the futureTailored induction and training to support your development from day oneExclusive perks and savings through our M&S Choices portalMarket-leading family policies, including parental, adoption and neonatal leave24/7 wellbeing support, including virtual GP access and mental health servicesOne paid volunteer day a year to support a cause that matters to you Everyone’s welcome We are ambitious about the future of retail. We’re disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We’re transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen. We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together. If you feel you’d benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process. #hybridrole

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on apply4u.co.uk

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:03 min

Platform compliance and security certifications for sensitive data

Chad Carlson · WWC 2021

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

2:10 min

Defining stream data processing versus standard event processing

Soroosh Khodami Soroosh Khodami · WWC 2024

3:46 min

Core terminology and audiences for interpretable artificial intelligence

Karol Przystalski · LIVE

4:21 min

Navigating compliance and risk in highly regulated environments

Alexandra Wudel Alexandra Wudel +3 · WWC 2025

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all