Data Protection Manager

• Lead and oversee privacy impact and risk assessments for new and changing business activities, partnering with risk owners to design, implement and monitor appropriate privacy safeguards
• Maintain oversight of data processing activities, including inventories, data flows and remediation actions, and support privacy compliance reviews related to acquisitions, divestments and significant business change
• Design, maintain and evolve the UK Hub privacy programme in alignment with RX’s global strategy, tracking and reporting on privacy risks, compliance maturity and remediation progress
• Provide clear, structured reporting and escalation to senior stakeholders, governance forums and the Global Privacy Office, and support audit activity and the delivery of remediation plans where required
• Act as a trusted Subject Matter Expert for privacy and data protection across the UK Hub, providing clear, practical guidance on applicable laws in a commercial context
• Develop and deliver tailored privacy guidance, training and communications, particularly for marketing and sales teams, ensuring materials remain current, consistent and accessible
• Build and sustain a strong network of privacy champions across the business, acting as a visible advocate for privacy by design and responsible data use
• Foster effective collaboration between privacy, security, legal, marketing, sales and operational teams
• Oversee the handling of data subject rights requests across the business unit, ensuring requests are managed accurately, consistently and within statutory timeframes
• Support the design and operation of effective rights request processes, including supplier held data

• Deep, practical knowledge of applicable privacy and data protection legislation in a commercial environment, with a strong understanding of digital platforms, online services, data‑driven business models and systems
• Proven ability to influence, advise and build trust with stakeholders at all levels, translating complex legal requirements into clear business actions
• Highly organised, resilient and comfortable managing multiple priorities in a fast‑paced, global, matrixed organisation
• Collaborative team player with the confidence to lead, challenge and operate effectively across functions
• Background in law, data protection, information governance or a related discipline, with demonstrable experience applying data protection law within a complex, data‑led commercial organisation
• Strong experience advising on privacy risk, compliance programmes and organisational change, including hands‑on experience with privacy management tools (e.g. OneTrust or similar)
• Fluency in English required
• German or Arabic advantageous, with willingness to travel as required

German or Arabic advantageous

• Generous holiday allowance with the option to buy additional days
• Health screening, eye care vouchers and private medical benefits
• Wellbeing programs
• Life Insurance
• Access to a competitive contributory pension scheme
• Save As You Earn share option scheme
• Travel Season ticket loan
• Electric Vehicle Scheme
• Optional Dental Insurance
• Maternity, paternity and shared parental leave
• Employee Assistance Programme
• Access to emergency care for both the elderly and children
• RECARES days, giving you time to support the charities and causes that matter to you
• Access to employee resource groups with dedicated time to volunteer
• Access to extensive learning and development resources
• Access to employee discounts scheme via Perks at Work