Data Protection Manager

We're looking for a Data Protection Manager to join our Business Assurance team. This is an exciting opportunity for an experienced data protection professional to take ownership of data protection compliance across the Group, ensuring robust governance, effective controls and a privacy-focused culture that supports the organisation's strategic ambitions.

As Data Protection Manager, you will lead the operational delivery of data protection services across Torus, providing expert advice and guidance to managers and stakeholders at all levels. You'll oversee compliance with data protection legislation, support privacy-by-design initiatives, manage subject access requests and data protection controls, and work closely with our outsourced Data Protection Officer. Working collaboratively across the business, you'll play a key role in promoting good data protection practices, mitigating risk and ensuring compliance remains practical, effective and aligned with organisational objectives. You'll also provide leadership and support to the Data Protection Co-Ordinator and Data Protection Apprentice, helping to shape and develop this important service area.

Working Pattern:

This is an agile working role, with an expectation to attend The Observatory office in Liverpool city centre every Tuesday, as well as a minimum of two additional days per week in the office. The successful candidate must be able to work across all Torus Group offices as required to meet business needs. Flexibility will be required to support the demands of the role and the wider business.

What you'll be doing:

• Provide expert data protection advice and support to managers and stakeholders across the Group.
• Lead and manage the operational delivery of data protection services, ensuring compliance with relevant legislation and regulatory requirements.
• Work closely with the outsourced Data Protection Officer and Group Head of Improvement, Performance & Risk to support the strategic direction of data protection across Torus.
• Oversee and maintain key data protection processes, including Records of Processing Activities, policies, procedures and registers.
• Ensure robust data protection and data quality controls are in place and operating effectively across the Group.
• Lead investigations into data protection breaches and near misses, identifying root causes and implementing remedial actions where required.
• Oversee and support Subject Access Requests, ensuring they are managed in accordance with statutory requirements and organisational policies.
• Carry out and support Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs), providing advice on appropriate controls and mitigation measures.
• Develop strong working relationships with stakeholders, providing practical, solution-focused advice and training on data protection matters.
• Promote a culture of privacy by design and data protection compliance throughout the organisation.
• Support the delivery of risk management, assurance and compliance frameworks, ensuring risks are appropriately identified and managed.
• Lead, develop and support the Data Protection Co-Ordinator and Data Protection Apprentice.
• Drive continuous improvement and value for money through the review and streamlining of data protection processes and systems.

What we're looking for:

• Higher education qualification or equivalent training and experience.
• Professional Data Protection qualifications, including Foundation and Practitioner level, or equivalent.
• Significant experience working within data protection, GDPR and regulatory compliance in a complex organisation.
• A proven track record of delivering operational services that provide measurable business benefits.
• Experience supporting and influencing stakeholders to achieve compliant and practical business outcomes.
• Knowledge and experience of data protection legislation, governance and risk management frameworks.
• Experience implementing process improvements and driving efficiencies while maintaining compliance.
• Strong leadership skills with experience managing, motivating and developing team members.
• Excellent communication and relationship-building skills, with the ability to engage effectively with colleagues, customers, board members and external partners.
• Strong project management and change management capabilities, with the ability to adapt to changing priorities.
• High levels of IT literacy and the ability to embrace new systems, technologies and ways of working.
• A proactive, resilient and self-motivated approach, with a commitment to continuous improvement and the Torus values of We Own, We Care and We Deliver.

Interview process:

Shortlisted candidates will be invited to attend an in-person interview at our Liverpool City Centre Office.

Additional Information:

Each successful applicant will be required to complete the following pre-employment checks prior to a start date being agreed:

• Right to work verification.
• Qualification certificate check (where applicable).
• Two satisfactory references.
• Occupational Health questionnaire.
• DBS check if applicable (Standard/Enhanced).
• Completion of all new starter documentation, including signed terms and conditions.

Please note, we reserve the right to close this advert early if we receive a sufficient number of applications.