GRC & Data Protection Manager

We’re looking for GRC & Data Protection Manager to join our team in London. Kings Cross on a permanent basis. This hybrid role offers flexibility, with expectations of spending three days in the office.

As the GRC & Data Protection Manager, you will play a pivotal role in shaping and embedding Liberty Blume’s data protection governance and broader risk management frameworks. Serving as the organisation’s subject matter expert, you will identify and assess data protection, artificial intelligence (AI), and regulatory risks, implement effective control measures, and ensure our governance standards are compliant, resilient, and fully integrated across business operations. This position operates at the crossroads of data protection, AI governance, and wider compliance activity within Liberty Blume’s Governance, Risk & Compliance function.

What will you be doing?

• Enhance and integrate our governance framework(s) related to data protection (GDPR/UK GDPR), AI Governance (EU AI Act) and risk management (ISO 31000), alongside wider legislation and standards
• Developing and advising on policies and procedures related to data protection, AI Governance and risk management
• Lead on the development and enhancement of controls used for risk identification, assessment, mitigation, and reporting
• Conduct risk and impact assessments, AI assessments and Data Protection Impact Assessments (DPIAs) for new projects, products and services
• Support with risk triaging, maintaining our Governance, Risk & Compliance on risk register and tracking trends and key risk indicators (KRIs)
• Overseeing Third Party Management for Blume’s suppliers and vendors, including supplier risk assessments
• Provide expert advice to business stakeholders on data protection, privacy by design and risk management
• Developing and dissemination of guidance and checklists (eg. on DPIAs, supplier due diligence) for different business units
• Advising and engaging in discussions with vendors, suppliers and B2B customers, where requested by business stakeholders
• Organise and attend cross functional governance and compliance meetings and forums
• Maintain Liberty Blume’s awareness of industry developments and regulations around data protection, AI governance, quality management and other areas

We tend to look for people with:

Essential:

• A relevant bachelor’s degree.
• Strong knowledge and hands‑on experience with GDPR/UK GDPR, the EU AI Act, the ePrivacy Directive, and other major regulatory frameworks (e.g., CCPA, HIPAA, EU Data Act).
• Understanding and practical experience with risk management and assessment frameworks such as ISO 31000 and ISO 27001.
• Professional data protection certifications (e.g., IAPP CIPP/E, CIPM, CIPT, AIGP) are highly beneficial.
• Certifications aligned to ISO standards are an advantage.
• Significant, relevant professional experience in a comparable role.
• Proven ability to conduct robust risk and compliance assessments.
• Experience developing or implementing data protection or risk management frameworks within an organisation.

Desirable:

• Exposure to additional ISO standards (e.g., ISO 9001, 14001, 45001, 22301).
• Familiarity with global privacy laws across the US, Latin America, and Asia.
• Experience using privacy management tools such as OneTrust.
• Demonstrated ability to collaborate effectively across functions.
• Strong analytical and research skills.
• Ability to quickly understand the technology underpinning Liberty Blume’s products and services, along with associated policy considerations.
• Strong organisational skills, with an ability to prioritise work and meet challenging deadlines.
• Experience working in a fast‑paced, dynamic environment.
• An understanding of the commercial, legal, and regulatory context in which Liberty Blume operates.

What’s in it for you?

• Competitive salary
• 25 days annual leave with the option to purchase 5 more.
• Enjoy your birthday off, plus receive an additional 3 days of annual leave once you reach 5 years of service.
• Access to wellbeing and mental health benefits such as the Calm app, personal medical, critical illness cover and dental insurance, plus many more.
• Matched pension contribution up to 10%
• Access to our car benefit scheme
• Access to our online learning platform to continue to develop and grow your career with us
• The chance to join an innovative, fast-paced and passionate team

Who we are:

Liberty Blume, a Liberty Global company, is a rapidly growing business services provider, specialising in tech-enabled back-office solutions. Our mission is to deliver efficiency, scale and value to our customers through Business, Procurement and Financial Solutions. If you’re curious, customer centric and enjoy being one step ahead, join us on our scale up journey and unlock your freedom to grow!

Liberty Global is an equal opportunity employer, committed to an inclusive environment and accommodating all candidates. We’re eager to hear from you, no matter your background.

Welcome

Our growth is creating great opportunities!

Our team is expanding, and we want to hire the most talented people we can. Continued success depends on it! So once you've had a chance to explore our current open positions, apply to the ones you feel suit you best and keep track of both your progress in the selection process, and new postings that might interest you!

Thanks for your interest in working on our team!!

About Us

We’re on a mission to redefine global business services with our tech-enabled solutions, that deliver efficiency, scale and value for our customers.

With over 20 years of experience, our team of passionate specialists have perfected an approach that deals with the demands of today and the markets of the future, so our customers stay one step ahead and unlock the freedom to grow.

We leverage technology expertise and global perspective, to challenge conventional thinking, transform operational efficiency, and eliminate administrative complexity.

Your data can also be shared with Liberty Blume plc and/or its majority owned subsidiaries (collectively, the “Liberty Blume”, “we” or “us”) and third party organizations providing recruitment, selection, placement and employment services.

Such third parties will use candidate information only in connection with such services, and applicable law.

Your data will be retained for the period of up to 1 year after closing the selection process, after which it will be deleted.

You have: the right to access your data or ask for a copy of the personal data that we hold about you and, if such personal data is inaccurate or incomplete, to request the rectification, erasure or blocking of such personal data. You have the right to object to the processing; and the right to lodge a complaint at a supervisory authority or a court of law in accordance with applicable laws.