Specialist, Data Protection Risk & Compliance

Position Overview

We are seeking a highly motivated Specialist, Data Protection, Risk & Compliance to join our Data Governance function.

This role is responsible for leading operational governance, information protection, compliance monitoring, and risk management activities across the organization. The successful candidate will work closely with business, technology, and governance teams to ensure information protection controls remain effective, operational risks are appropriately managed, and governance requirements are consistently implemented.

The role combines operational leadership, stakeholder management, information protection expertise, and compliance oversight, making it ideal for candidates with experience in technology risk, data protection, governance, cybersecurity operations, or compliance management.

Key Responsibilities

Information Protection & Risk Management

• Lead operational activities supporting information protection, governance monitoring, and risk management programmes.
• Review operational incidents, control exceptions, and compliance findings, ensuring appropriate remediation and follow-up actions.
• Support the assessment and management of information-related risks across business processes and technology platforms.
• Coordinate escalation and reporting of significant operational risk matters.

Governance & Compliance

• Ensure operational activities align with internal governance requirements, policies, standards, and regulatory obligations.
• Support governance reviews, compliance assessments, and control effectiveness evaluations.
• Coordinate periodic compliance reporting and management reviews.
• Support the implementation and continuous improvement of governance processes and controls.

Information Protection Technologies

• Provide operational oversight and governance support for enterprise information protection technologies.
• Partner with platform teams to ensure protection controls remain effective and aligned with business requirements.
• Review and recommend improvements to protection policies, monitoring capabilities, and operational processes.
• Support technology enhancement, migration, and transformation initiatives related to information protection and governance.

Preferred Areas of Exposure

• Data Loss Prevention (DLP), Information Protection Technologies
• Proofpoint, Symantec DLP, Microsoft Purview
• Email Security Controls
• Information Classification Solutions
• Insider Risk Management Platforms

Operational Reporting & Risk Intelligence

• Develop and present governance, compliance, and operational risk reports for management review.
• Analyse trends, recurring issues, and operational metrics to support decision-making.
• Support governance forums through meaningful reporting, insights, and recommendations.
• Work with stakeholders to improve reporting quality, visibility, and governance outcomes.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Business Information Management, or a related discipline.
• 2–5 years of relevant experience in one or more of the following areas:
• Information Governance
• Data Protection
• IT Compliance
• Operational Risk Management
• Security Operations

Preferred Skills

• Experience with information protection technologies such as Proofpoint, Symantec DLP, Microsoft Purview, or similar solutions.
• Familiarity with information governance, records management, information lifecycle management, and enterprise compliance frameworks.
• Experience with Power BI, Power Query, Power Automate, or other reporting and automation tools.
• Understanding of information classification, data protection, and governance concepts.
• Strong analytical, problem-solving, and communication skills.