The Role

The Compliance & Data Protection Manager is responsible for managing contractual and legal frameworks including maintaining Terms & Conditions, licensing agreements and overseeing negotiations with customers and suppliers. This role acts as the primary contact for data protection compliance, including leading DPIAs and liaising with the external DPO.

This role will oversee a small Compliance Team, with broader responsibility for third party management, company accreditations and health and safety.

This is a 12-month fixed-term contract which can be based at any of our UK offices (Wokingham, Stirling or Exeter) or fully remote in the UK.

Key responsibilities

• Ensuring the ongoing maintenance and updating of the CitNOW Groups Terms and Conditions and Licensing Agreements
• Overseeing contractual negotiations with customers, including drafting ad-hoc agreements and reviewing customer Terms and Conditions
• Ensuring continued compliance and monitoring of applicable legal and regulatory frameworks, completing a gap analysis as required, e.g. the EU AI Act
• Acting as the primary point of contact for all data protection queries, ensuring compliance with UK GDPR, Data Protection Act 2018, EU GDPR and other applicable country-specific privacy laws
• Instigating and leading the completion and internal sign off for DPIA’s
• Managing a small Compliance Team, responsible for third-party and supplier management, Health & Safety and Company accreditations e.g. ISO 27001
• Monitoring and reporting legal and compliance risks, tracking status through to completion

Our Brand Values

• We are powered by our people
• We delight our customers
• We make it happen
• We are always learning
• We are One Team

Knowledge & Skills:

• Demonstratable and strong commercial law knowledge
• In-depth understanding of UK & EU GDPR and related data protection legislation
• Excellent communication and stakeholder management skills
• Ability to work under pressure and manage multiple projects simultaneously