Data Protection Manager

We are growing. Privacy and AI compliance has moved from a back office concern to a board level priority, and our clients are asking more of us because of it. Every week brings a new regulation, a new enforcement decision, or a new product launch that needs a privacy lens before it ships.

This demand is an opportunity for us. We are building Lex Dinamica for what comes next in this work, and we are looking for the people who want to build it with us.

This role is how we run the data protection function for the clients who look to us to hold that responsibility on their behalf, and how we grow that service as demand for it accelerates.

Lex Dinamica is a consulting firm that provides Privacy, AI and Risk solutions. Our advisory, technology and DPO services help clients address regulatory challenges worldwide and deliver compliance-driven value.

Our clients range from FTSE 100 companies and global multinationals to government contractors and high growth scale ups, and they come to us for advisory work, DPO support delivered as a service, AI governance, and privacy technology programmes including OneTrust, where we are a certified implementation partner.

The Data Protection Manager role sits at the intersection of our advisory work and our DPO as a service offering. You will lead engagements where Lex Dinamica is trusted to hold or support the data protection function for a client, alongside a small team of colleagues that you help guide and develop.

In this role, you will:

• Lead data protection engagements including DPO support delivered as a service
• Own the operational running of privacy programmes on behalf of clients
• Advise senior client stakeholders on regulatory obligations and risk trade offs
• Manage and develop a small team of one to two direct reports

In practice, that means being the person clients rely on to run their data protection function alongside the team you lead, and the senior voice in the room when the harder decisions come up.

You will lead our DPO as a service work for a portfolio of clients. Advising at board level, triaging what matters from what does not, running the regulator facing conversations when they arise, and holding the trust of clients who look to us to keep them safe.

You will own the operational running of privacy programmes. Records of processing, DPIAs, DSARs, vendor governance, breach response, training, and the everyday machinery that makes a data protection function actually work. You will be responsible for the quality of what leaves the door.

You will advise senior stakeholders. General counsel, Chief Privacy Officers, boards, and the executives who need to make decisions with regulatory implications and want a trusted voice in the room. You will explain what matters, what does not, and where the real risk sits.

You will manage and develop your team. One to two direct reports today, likely to grow as the practice grows. You will set objectives, run reviews, give feedback, and help the people who report to you become better than they were when they arrived.

You will contribute to how we work. Our practice is growing, and the people who join at this level will help shape how the firm develops the service line and takes it to more clients.

• Meaningful experience in data protection, whether as a Data Protection Officer, in a senior in house privacy role, or in a consulting seat delivering DPO support to clients.
• Depth in GDPR and the UK Data Protection Act, with the ability to make judgement calls in ambiguous situations rather than reaching for the rulebook every time.
• Experience running or supporting the operational side of a privacy programme, from ROPAs and DPIAs to breach response and regulator engagement.
• Experience managing and developing others. You have set objectives, given feedback, and helped junior colleagues progress.
• Strong written and verbal communication in English. You can advise a board, brief a general counsel, and coach a junior colleague on the same day.
• A right to work in the UK.
• A recognised privacy credential such as CIPP/E, CIPM, CIPT, or a legal qualification in a relevant jurisdiction.
• Formal DPO experience, either as an internal DPO or as an external service provider.
• Familiarity with OneTrust or comparable privacy technology platforms.
• Consulting experience, whether at a professional services firm, a Big Four, or a privacy specialist firm.
• Exposure to AI governance work, including the EU AI Act, NIST AI RMF, or ISO 42001.
• Sector depth in regulated industries such as financial services, healthcare, or public sector.
• Additional language capability beyond English.
• A relevant degree in a field such as Law, Business, Politics, Information Security, or similar.

Lex Dinamica was built from day one to solve the problems that organisations face when data, regulation, technology and trust all have to hold together at once. That focus is what we are, and it is what we lead with from the first client conversation to the final deliverable.

Headquartered in London and supported by delivery centres across the EU, US and India, we partner with clients from FTSE 100 companies and global multinationals to government contractors and high growth scale ups. Our work spans more than fifty jurisdictions and over one hundred and fifty delivered projects. Our founders came out of Big Four consulting. The firm they built deliberately keeps what works about that model, the rigour, the breadth, the client discipline, and strips out what does not, the layers, the politics, the pace.

We are a firm of curious people, fast learners, and genuine team players. We are selective about who we hire, because the people already here are worth working alongside.

You will be based in our London office with hybrid working, spending two days a week in the office and the rest of your week wherever you work best. The specific rhythm will flex around client commitments, team moments, and how you do your best work.

At Lex Dinamica, we understand that a career is one part of a wider life, and we build our working patterns around that reality. Our hybrid model is designed to give you the face to face time that builds relationships, accelerates learning, and makes a small firm feel like one, alongside the focus time that consulting work genuinely needs.

26 days of annual leave, with the option to accrue additional days over time

Hybrid working as standard

Optional private health insurance

A work from anywhere policy that lets you work abroad for defined periods each year

JOIN THE TEAM

If this sounds like the role you are looking for, apply below.

For more opportunities, follow us on LinkedIn.

The data you provide us with will be processed exclusively for recruitment purposes and assessing your application against our requirements. You may withdraw your application at any time by getting in touch with a member of our team, via LinkedIn or the contact details found on our website. You may ask us to keep your information on file for any future opportunities.

Lex Dinamica is proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organisation. Employment at Lex Dinamica is based on substantive ability, objective qualifications, and work ethic, not an individual's background, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offences, reproductive health decision, or any other characteristics protected by applicable law.