Data Protection Manager

PwC's internal Privacy Team is looking for two Data Protection/privacy specialists to join the team.
The Privacy team is at the forefront of ensuring PwC complies with its legislative and regulatory obligations under Data Protection law. You will have allocated areas of responsibility for which you will lead and manage the privacy compliance programme. You will help engagement teams navigate privacy compliance and complexities. You will be at the forefront of assessing projects and processes for privacy compliance, including those using cutting-edge technologies such as Generative AI and automations.
We are looking for candidates who:

• have experience advising on privacy matters, particularly in an in-house context;
  
• have a regulatory/compliance background;
  
• have a solid understanding of EU and UK Data Protection legislation (UK GDPR, DPA, PECR);
  
• have an understanding of ancillary legislation (EU AI Act, UK AI frameworks), regulatory developments and case law updates concerning data privacy;
  
• are enthusiastic about developing themselves and others;
  
• can work to tight deadlines often with multiple demands;
  
• are highly motivated and confident to work independently, but with support from more experienced subject matter experts/team members where required.
  

The successful candidate's key responsibilities will include:

• Provide accurate, appropriate, timely and pragmatic advice, striking a balance between legal/regulatory requirements and the wider interests of the business;
  
• Review new technology offerings to ensure compliance with Data Protection by design and default;
  
• Conduct comprehensive Data Protection impact assessments;
  
• Determine the appropriate basis for undertaking international data transfers;
  
• Undertake international data transfer risk assessments;
  
• Respond to Data Protection incidents, including remediation and escalation;
  
• Assist on Data Protection contractual negotiations, including data controller/processor conversations and international data transfer arrangements;
  
• Support the Team Lead with other matters as and when required;
  
• Support junior team members.
  

This role will report to Senior Managers in the team, the Privacy Team Lead and the firm's Data Protection Officer.
We are recruiting for two Managers, with oversight of the following areas:
Managing the firm's data subject rights programme including the discovery, redaction and provision of data connected with data subject access requests.
Managing the privacy practices of the Audit line of service including supporting Audit staff with privacy compliance across client engagements.
Managing the privacy practices of the Operate line of service including supporting Audit staff with privacy compliance across client engagements.
Managing the privacy practices of the Tax line of service including supporting Audit staff with privacy compliance across client engagements.
The role demands the following skills:
Essential skills:

• Certified Information Privacy Professional Europe (CIPP/E), BCS/ISEB Certificate in Data Protection or equivalent qualification;
  
• Degree-level education (preferably in law, or a related subject);
  
• In-house experience of advising on privacy matters
  

Desirable skills:

• Other privacy accreditations such as CIPM, CIPT etc.
  
• Experience of managing or transforming an existing data subject rights programme, including end-to-end management;
  
• Experience with using eDiscovery platforms like Relativity;
  
• Experience in the application of Data Protection in the professional or financial services sector;
  
• Experience of regulatory interaction (e.g. the Information Commissioner's Office);
  
• Awareness of foreign jurisdiction privacy requirements.
  

This is a hybrid role requiring 60% office attendance.