Vista previa generada por IA
Lead Data Privacy at BNP Paribas Personal Finance in Solihull – hybrid role
Oversee GDPR compliance, DPIAs, ROPA, and data governance across UK operations
Job Title: Data Privacy Manager
Location: Solihull; a flexible hybrid working model which supports you as well as enabling you to work collaboratively with your colleagues
Hours: Full time
______________________________________________
A bit about us:
At BNP Paribas Personal Finance, we are proud to be part of a global banking group. Our mission is simple: to provide straightforward consumer finance solutions that empower customers to make responsible financial decisions. We partner with some of the UK’s most well‑known retailers and brands to help their customers finance purchases in a responsible way.
The Role:
As a Data Privacy Manager, you will play a central role in ensuring the organisation meets its obligations under UK GDPR, the Data Protection Act 2018, and other applicable privacy and regulatory requirements. You will lead activity that strengthens our privacy posture and supports the responsible and compliant use of personal data across the business.
A key focus of this role is overseeing and supporting the completion of Data Protection Impact Assessments (DPIAs) and other mandatory privacy assessments. You will work closely with teams across the organisation to ensure new and existing processes, systems and initiatives are evaluated effectively, with risks clearly identified and appropriate controls implemented. You will also contribute to the maintenance and accuracy of our Record of Processing Activities (ROPA), helping ensure the organisation has a clear understanding of how personal data is used and protected. You will act as a subject matter expert for data protection matters, offering pragmatic advice, guiding stakeholders through complex privacy issues, and promoting best practice in line with regulatory expectations. Your work will help embed a strong culture of privacy awareness and accountability, reflecting the organisation’s commitment to safeguarding personal data.
This role reports into the Head of Data Governance within BNP Paribas Personal Finance UK and operates within the first line of defence, supporting the business in meeting its regulatory responsibilities and managing privacy risks effectively
Key Responsibilities:
- • Completion of data governance documentation such Data Protection Impact Assessments (DPIA), Record of Processing Activities (RoPA), Cookie Privacy Assessments & Legitimate Interest Assessments.
- • Assessing data quality across BNP PF, complete root cause analysis where data is impacted.
- • Managing multiple stakeholders and understand technology and commercial concepts quickly, e.g. working closely with Risk and Finance teams to ensure BCBS239 compliance and working closely with IT and marketing teams to manage cookies.
- • Identifying areas of improvement in local practices, relative to managing data governance. Contributing to complex projects, orientating the project to deliver maximum business benefit whilst adhering to the data governance, protection and management principles.
- • Representing the data governance team across analytical groups & business areas to provide advice & support on data infrastructure, data integrity, quality and privacy. Advising of system recommendations and technical approaches to maintain controls / validation.
- • Remaining up to date with the requirements of GDPR and helping build remedial work programs to highlight ongoing risks.
- • Championing and growing awareness and knowledge of data governance to enhance the data culture across the organisation.
- • Acting as a subject matter expert on data related issues, working collaboratively with various stakeholders to communicate data risks and administer guidance, training and educational materials when required.
- • Working effectively under pressure with competing and rapidly changing priorities
Skills & Attributes:
- • Extensive knowledge of data architecture and quality
- • Substantial experience of working within a data governance or protection setting, with a strong understanding of UK GDPR, PECR and BCB239
- • Strong ability to embed information, business process and system wide changes to a technical and non-technical audience
- • Strong ability to extract information by questioning, active listening and interviewing
- • Demonstrable stakeholder and relationship management skills
- • Project management experience is desirable
Could this be you?
Making a positive impact is at the heart of everything we do – whether for our colleagues, customers, partners, or the community. We live by our values: We’re positive, we’re brave, and we own it. We believe a positive attitude and a passion for making things happen matter most. Don’t let confidence hold you back – there’s no such thing as a ‘perfect’ candidate. If you meet 75% of the requirements for this role, we want to hear from you! Whether you're considering a career change or exploring a sector jump, we welcome applicants with transferable skills.
What’s in it for you
As a Top Employer UK, we offer a supportive, inclusive environment and a flexible benefits package that you can tailor to your lifestyle. Highlights include:
- • Competitive salary and comprehensive package, contributory pension, and health cash plan
- • Opportunity to buy/sell holiday giving you even more control over your work-life balance
- • Flexible benefits including private medical insurance and lifestyle discounts
- • A culture that values collaboration, development, and wellbeing
Your Application Journey
- • Call with our Talent Acquisition team
- • Informal chat with the Hiring Manager
- • Competency-based interview (60 minutes)
We aim to complete the process within 3-4 weeks, depending on availability. If you’re not shortlisted, we’ll still let you know the outcome. Please note that this role may close early once we have enough suitable applicants, so apply soon.
Equal Opportunities
We’re committed to creating an inclusive workplace and ensuring equal opportunities for all, regardless of age, disability, gender, identity, race, religion, sexual orientation, or background.