Hybrid opportunity at
ZopaSenior Data Privacy Manager
Zopa is recruiting a Senior Data Privacy Manager in London for its Data Privacy team, part of the Operational Risk and Compliance function. The team is…
Career Tools
About This Role
Zopa is recruiting a Senior Data Privacy Manager in London for its Data Privacy team, part of the Operational Risk and Compliance function. The team is building a risk-based way of handling privacy that protects customers, supports responsible use of data and gives colleagues clear answers in grey areas. The manager is the senior first-line privacy lead for the whole business. The post involves line management of a Data Privacy…
Job Description
Zopa is recruiting a Senior Data Privacy Manager in London for its Data Privacy team, part of the Operational Risk and Compliance function. The team is building a risk-based way of handling privacy that protects customers, supports responsible use of data and gives colleagues clear answers in grey areas. The manager is the senior first-line privacy lead for the whole business.
The post involves line management of a Data Privacy Associate and advising engineering, technology, operations, legal, risk and information security on significant product and data questions. Core tasks include turning intricate privacy matters into proportionate, workable advice, building a risk-based framework with a usable view of appetite, and steering complicated data-use and governance choices. The manager leads the response to serious privacy incidents and ensures decisions are documented, builds relationships so privacy is involved early in projects, looks for manual privacy steps that can be automated, and speaks for the first-line view at senior level. The job is hybrid, with two to three days a week in the London office.
Candidates need hands-on privacy experience, a working grasp of UK GDPR and how regulators enforce it, and sound judgement in weighing individual rights against business aims and leftover risk.
Responsibilities
- Turn complicated privacy questions into clear, proportionate recommendations that let work move ahead responsibly.
- Help create and embed a risk-based framework for privacy risk, including a practical view of risk appetite.
- Collaborate with data and technology teams on hard data-use and governance decisions.
- Own the response to significant privacy issues and make sure decisions rest on solid evidence.
- Develop the Data Privacy Associate through coaching, clear standards and demanding work.
- Form trusted relationships across the business so that privacy is consulted early.
- Find manual privacy processes that can be simplified or automated.
- Present the first-line privacy view to senior stakeholders with credibility.
Requirements
- Substantial hands-on data privacy experience and strong working knowledge of UK GDPR and its enforcement.
- Good judgement in balancing privacy rights, customer protection, business goals and residual risk.
- Able to explain privacy issues plainly to non-specialists and make defensible recommendations.
- Has led or meaningfully shaped privacy frameworks, governance or operating models.
- Comfortable taking ownership of difficult problems and working through ambiguity alone.
- Experience managing, mentoring or developing other people.
- Able to spot data and technology risks without needing expertise in a specific tool.
Qualifications
- Experience in fintech, technology, banking or another regulated sector.
- Experience with automated decision-making that has significant or legal effects.
- Understanding of privacy issues in AI model training, prompting and outputs.
- Track record of automating privacy work to improve efficiency.
- Legal, operational risk or specialist data protection qualifications.
Benefits
- Flexible working, including the option to work from overseas for as many as 120 days a year, subject to the right to work in that country.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role based?
The role is based in London and is hybrid, with office attendance two to three days a week.
Does the role manage anyone?
Yes. The senior manager line-manages a Data Privacy Associate.
Which legal framework is central to the role?
Strong working knowledge of UK GDPR and its enforcement context is required.
Is a salary stated?
No. The posting does not specify a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.