Data Protection Manager

Octopus Energy

. Develop data protection strategy, policies, frameworks, and tools to ensure compliance with UK GDPR, the Data Protection Act 2018, PECR, and other relevant legislation .

Posted 10/5/2026full-timeLondon • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing data protection strategies and ensuring compliance with UK GDPR and related legislation. Capable of leading Data Protection Impact Assessments and managing Subject Rights processes while effectively communicating data protection concepts across teams.

Highest-signal resume keywords

Data Protection Strategy DevelopmentData Protection Impact Assessments (DPIAs)Subject Rights ManagementUK GDPR ComplianceInformation Security Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Protection Act 2018Legitimate Interest Assessments (LIAs)Data Subject Access Requests (SARs)Record of Processing Activities (RoPA)Compliance MonitoringData Breach InvestigationDue Diligence for Third-Party SuppliersData Protection TrainingPrivacy Regulatory Landscape AwarenessFCA Regulation Knowledge

Soft Skills

Clear CommunicationSelf-MotivatedAttention to DetailInitiativeAbility to Work Under Pressure

Tools & Technologies

Google WorkspaceSlack

Certifications & Qualifications

ISO27001 Compliance Awareness

Industry Keywords

Financial ServicesData PrivacyData ProtectionRegulatory ComplianceData Protection Frameworks

About the role

Key responsibilities & impact

Develop data protection strategy, policies, frameworks, and tools to ensure compliance with UK GDPR, the Data Protection Act 2018, PECR, and other relevant legislation
Advise software engineering, financial, marketing, and business development teams on data privacy matters
Lead Data Protection Impact Assessments (DPIAs), update the Record of Processing Activities (RoPA), and conduct Legitimate Interest Assessments (LIAs)
Own and refine end-to-end Subject Rights Management processes, including Data Subject Access Requests (SARs)
Investigate, report, and communicate data breaches with the ICO
Support business development teams with customer data protection agreements and enquiries
Conduct due diligence for third-party suppliers and vendors
Design and deliver data protection training and awareness campaigns
Monitor the evolving privacy regulatory landscape and report on company compliance and risk
Work closely with the DPO and existing Data Protection Manager
Shape the technical landscape of Data Protection and internally develop tools to deliver services

Requirements

What you’ll need

Passion for Data Protection and a proven track record of delivering compliance with legislation in a fast paced business
Experience working with software product teams building bespoke software for delivering customer and internal solutions
Familiarity with modern tooling including Google Workspace and Slack
Ability to explain Data Protection concepts clearly and relatably to those unfamiliar with them
Forward-thinking, self-motivated, and able to take responsibility for initiatives and drive them to implementation
Experience working in a pressured environment, prioritising work appropriately while maintaining high levels of attention to detail
Awareness of Information Security principles and requirements for ISO27001 compliance (bonus)
Knowledge of FCA regulation and experience in the financial services industry (bonus)
Background in technology (bonus)

Benefits

Comp & perks

Flexible interview accommodations and customised interview process
Flexible salary approach matched to experience
Employee benefits and perks through the Octopus Employee Benefits perks hub
Autonomy and opportunities to learn, decide, and build
Dog-friendly offices
Equal opportunities and inclusive work environment