Data Protection Manager

Overview

As Data Protection Manager at ScottishPower, you will lead data protection across People & Organisation and Health & Safety, guiding GDPR compliance and privacy risk management. You’ll partner with the Corporate Data Protection Officer to shape and deliver the data protection programme and advise on contracts and regulatory obligations. You’ll assess risks, implement controls, and monitor KPIs while supporting training and awareness across the business. This is a formative role in a large, mission-driven energy group driving data privacy and transformation.

Pay / Benefits

• 36 days annual leave
• Pension scheme with 10% company contribution
• Private healthcare
• Share schemes
• Cycle to work scheme
• Healthcare benefit options

Responsibilities

• Provide expert guidance on privacy requirements, contract negotiations and regulatory obligations
• Lead data protection matters across People & Organisation and Health & Safety
• Ensure data protection assessments are completed and risks mitigated
• Monitor data protection controls across business operations
• Deliver training and awareness initiatives on privacy
• Represent the function at corporate forums and industry groups
• Act as trusted advisor to teams to ensure GDPR and data protection compliance
• Analyse information to identify practical risk and compliance solutions

Key requirements

• Proven experience in Data Protection or Privacy Compliance
• Strong knowledge of GDPR and data protection legislation
• Ability to analyse complex information and propose practical solutions
• Excellent communication, presentation and relationship management
• Experience influencing senior stakeholders
• Knowledge of information security, technology risks and risk management principles
• Bachelor’s degree or equivalent experience
• Data Protection qualification would be advantageous

• Stakeholder engagement
• Communication
• Influencing others
• GDPR
• Privacy by design and DPIAs
• Risk assessment and control effectiveness

…