Are you ready to chart your own career path? With our refreshed strategy, we’re building on our rich heritage and transforming our business to be more scalable and efficient, unlocking the capabilities needed for future success. This includes significantly investing in technology, streamlining the way we work and creating an environment where colleagues feel engaged, empowered and accountable; where they can show up, speak up and perform - because we believe in the difference our work makes.
Location: Cirencester Office
Workplace Type: Hybrid
Employment Type: Permanent
Seniority: Mid-Senior Level
About the RoleWe're looking for an experienced Senior Data Protection Manager to lead and continually enhance our Data Protection and Privacy Framework, ensuring SJP maintains the highest standards of data protection compliance and privacy risk management.Reporting to the Director of Group Data Governance, Protection and Privacy, you'll lead a team of five specialists and play a pivotal role in shaping data protection strategy, managing privacy risks, and driving compliance across the organisation. You'll also act as deputy to the Director and serve as a key point of contact for complex privacy matters.What you'll be doing:Lead and optimise the Data Subject Access Request (DSAR) process, ensuring compliance with statutory requirements and service standards.Own and develop SJP's Data Protection and Privacy Risk Framework, including policies, processes and supporting technology.Define, monitor and report on information and data risk appetite, including key risk indicators and governance reporting.Lead, coach and develop a high-performing team of Data Protection and DSAR specialists.Manage significant data breaches and privacy incidents, including investigations, regulatory notifications and remediation activities.Provide oversight and challenge of third-party data protection risks, ensuring supplier compliance.Lead responses to Data Protection and Privacy complaints, including engagement with the ICO.Act as a trusted adviser on complex data protection and privacy matters across the business.Essential Criteria:Professional Data Protection qualification such as CIPP/E, CIPM or CIPT.Significant experience in a senior Data Protection or Privacy leadership role.Demonstrable expertise managing DSARs, privacy complaints and complex breach investigations.Experience developing and implementing enterprise-wide privacy frameworks.Strong knowledge of the UK GDPR and Data Protection Act 2018.Experience managing relationships with regulators, particularly the ICO and FCA.Excellent stakeholder management and communication skills, with the ability to empathise appropriately and influence at all levels.A proactive mindset, strong judgement and the confidence to challenge and drive continuous improvement.DesirableKnowledge of international privacy regulations.Experience managing third-party suppliers and vendor risk.Change management experience.Background in customer-facing or client-focused environments.
What's in it for you?
Whatever stage of life you're in, our benefits are designed to provide the support, flexibility, and peace of mind you need to thrive both at work and beyond.
In addition to our discretionary annual bonus scheme, which reflects both individual and company performance, you'll benefit from a market-leading benefits package tailored to support your wellbeing, financial security, and family life.
Our benefits include:
We're an equal opportunities employer and want to ensure our recruitment process is accessible and inclusive for all, if you require reasonable adjustment(s) at any stage please let us know by emailing us at careers@sjp.co.uk
Research tells us that applicants (especially those from underrepresented groups) can be put off from applying for a role if they do not meet all the criteria or have been on an extended career-break. If you think you would be a good match for this role and can demonstrate some transferable experience please apply, regardless of whether you tick every box.
What's next?
If you're excited about this role and believe you have the skills and experience we're looking for, we'd love to hear from you! Please submit an application by clicking ‘apply’ below and our team will be in touch.
As a business regulated by the FCA we would advise you to familiarise yourself with the conduct regulations and in particular consumer duty obligations prior to an interview with SJP.
#LI-HYBRID
#LI-PC1

St. John is a full-service agency headquartered in Jacksonville since 1984. St. John has been home to a quality of work and a quality of life that has helped attract great people and build one of the region’s largest independent agencies. We inspire growth for brands by purposefully applying insights, technology and creativity to create opportunities to be more relevant, more visible and more competitive.
We lead with character, courage, kindness. Three ideals that have defined our company and our pursuit of growth on behalf of our clients from the beginning. We believe that success and great ideas come from hard work, honesty and the courage to try new things. We also believe that to inspire people to take action – be they customers, employees or our community, requires empathy and responsibility to all. It’s a credo that has served us well for 40 years and counting.