SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Octopus Energy is seeking a Data Protection Manager to join their fast-growing electric vehicle leasing business. You will work closely with the Data Protection Officer and existing Data Protection Manager to ensure compliance with UK GDPR, the Data Protection Act 2018, PECR, and other relevant legislation while supporting the company's expansion and developing creative solutions to business challenges.
Key responsibilities include:
- Develop and refine data protection strategy, policies, frameworks, and tools to ensure UK GDPR and related legislation compliance
- Advise teams across the company (software engineers, financial specialists, marketing, business development) on data privacy matters
- Lead Data Protection Impact Assessments (DPIAs), maintain the Record of Processing Activities (RoPA), and conduct Legitimate Interest Assessments (LIAs)
- Own and refine end-to-end processes for Subject Rights Management, including Data Subject Access Requests (SARs) and other data subject rights
- Manage data breaches including investigation, reporting, and communication with the ICO
- Support business development teams with customer data protection agreements and enquiries
- Conduct due diligence for third-party suppliers and vendors to manage risk
- Design and deliver engaging data protection training and awareness campaigns
- Monitor the evolving privacy regulatory landscape and report on the company's compliance and risk
This role is technical in nature—you will shape the technical landscape of data protection and develop internal tools to deliver these services to the business.
Requirements:
- Passion for data protection with proven track record of delivering compliance with legislation in a fast-paced business environment
- Experience working with software product teams building bespoke software for customer and internal solutions
- Familiarity with modern tooling including Google Workspace and Slack
- Ability to explain data protection concepts clearly to those unfamiliar with them
- Forward-thinking, self-motivated, able to take responsibility for initiatives and drive them to implementation
- Experience working in pressured environments, prioritizing work while maintaining high attention to detail
Bonus qualifications:
- Awareness of Information Security principles and ISO27001 compliance requirements
- Knowledge of FCA regulation and experience in financial services industry
- Background in technology
