Privacy Risk & Compliance Officer

Privacy Risk & Compliance Officer   

Salary- 70k & Great Benefits

Location- Bristol

About the Role

We are seeking an experienced and highly motivated Privacy, Risk & Compliance Officer to support and oversee the effective delivery of our Privacy, Risk and Compliance frameworks across the UK business.

This is a key role within the organisation, providing oversight, guidance and assurance across data privacy, regulatory compliance, operational risk and internal controls.

Working closely with senior leadership and teams across HR, Recruitment, Operations, IT, Procurement, Legal, Business Development and Account Management, you will ensure that regulatory requirements and global standards are effectively embedded throughout the business.

The role reports directly into the country management structure and maintains direct reporting relationships with the Regional Privacy Officer, Head of Risk and Head of Compliance.

Key Responsibilities

Privacy & Data Protection

• Oversee the implementation and ongoing management of privacy requirements across the business.
• Ensure appropriate privacy notices and consent documentation are issued and maintained for employees.
• Monitor personal data processing activities and identify new or changing processing requirements.
• Work closely with HR, Recruitment and other business functions to ensure privacy requirements are consistently applied.
• Support compliance with GDPR and other applicable data protection legislation.
• Act as a key point of contact for privacy-related queries, reviews and audits.

Records of Processing & OneTrust

• Maintain accurate and complete Records of Processing (ROP) within OneTrust.
• Ensure Controller and Processor records are appropriately documented and regularly reviewed.
• Identify and document new or amended personal data processing activities.
• Work with IT, Operations, Account Management and other functions to ensure records remain accurate and complete.
• Conduct quality reviews and challenge incomplete or inaccurate information where required.

Risk Management

• Lead the implementation and ongoing maintenance of the organisation’s Risk Management Framework.
• Identify, assess, monitor and report risks across the business.
• Work with senior management, risk owners and operational teams to ensure risks and internal controls are appropriately documented.
• Maintain accurate and comprehensive Risk Registers.
• Develop, monitor and support risk mitigation and remediation plans.
• Review the effectiveness of existing controls and recommend improvements.
• Escalate significant risk events in line with established governance processes.
• Provide regular risk and control reporting to the Global Risk Team.
• Promote a strong culture of risk awareness and accountability throughout the organisation.

Compliance & Governance

• Support the implementation, maintenance and monitoring of the Global Compliance Framework.
• Monitor relevant regulatory and legislative developments relating to Privacy, Risk and Compliance.
• Identify areas of non-compliance or control weakness and support appropriate corrective actions.
• Act as a key point of contact for GDPR, BCR and other Privacy and Compliance audits.
• Support the delivery of mandatory Privacy and Compliance training.
• Prepare regular reports and management information for senior leadership and Global Privacy, Risk & Compliance teams.
• Provide guidance and support to operational teams to ensure adherence to internal standards and regulatory requirements.

Client & Contract Compliance

• Work with Account Management, Business Development and Legal teams to ensure appropriate Privacy and Compliance provisions are included within client contracts.
• Support privacy amendments and negotiations relating to existing client agreements.
• Assist with client Privacy, Risk and Compliance due diligence.
• Provide updates and reporting on contractual privacy and compliance requirements.

Vendor Due Diligence

• Oversee Privacy and Compliance due diligence for new and existing vendors.
• Partner with local and global Procurement teams to ensure appropriate checks are completed.
• Review Vendor Due Diligence Questionnaires and approve or escalate findings where appropriate.
• Ensure required due diligence is completed before new vendor agreements are executed.

New Business & Client Support

• Support client bids and pre-sale discussions relating to Privacy, Risk and Compliance.
• Assist with client due diligence and assurance activities.
• Support new business go-live activity in line with established control frameworks.
• Provide specialist Privacy, Risk and Compliance guidance throughout mobilisation and implementation activities.

About You

• You will be an experienced Privacy, Risk or Compliance professional with the confidence to work across multiple functions and engage effectively with stakeholders at all levels of the organisation.
• You will bring strong analytical skills, sound judgement and the ability to translate complex regulatory requirements into clear and practical business solutions.

Essential Skills & Experience

• Previous experience within Privacy, Risk and/or Compliance.
• Strong working knowledge of data protection legislation and GDPR.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent communication and stakeholder-management capabilities.
• Strong influencing skills with the confidence to constructively challenge at all levels.
• Ability to manage multiple priorities within a complex business environment.
• High level of integrity and commitment to regulatory compliance and good governance.
• Proficient in Microsoft Office, including Excel and PowerPoint.
• Fluent in English.

Desirable

• Working knowledge of Anti-Money Laundering (AML) legislation and its application.
• Experience working with OneTrust or a similar Privacy/GRC platform.
• Experience supporting client audits, regulatory reviews or due diligence exercises.
• Professional qualification or certification within Privacy, Risk, Compliance or Security.
• Candidates without an existing recognised certification should be willing and able to obtain an appropriate certification within their first six months in the role.

Education

Bachelor’s degree or equivalent relevant professional experience.

Professional qualifications within Privacy, Risk Management, Compliance or Security would be advantageous.

#LI-CW1