← All roles

Data Protection Manager

Octopus Energy· Octopus Electric Vehicles – Product & Technology
Apply on company site
Hybrid (London (GB))Full-timePosted 2w ago

About the role

Second Data Protection Manager to join the team, supporting compliance with UK GDPR and related legislation, shaping the technical landscape of Data Protection and internal tool development, and collaborating with multiple teams.

Responsibilities

  • Develop our data protection strategy, policies, frameworks and tools to ensure our compliance with UK GDPR, the Data Protection Act 2018, PECR and other relevant legislation.
  • Advise on data privacy matters for teams across the company from software engineers, financial specialists to marketing and business development.
  • Maintain records and documentation by leading Data Protection Impact Assessments (DPIAs), updating the Record of Processing Activities (RoPA), and conducting Legitimate Interest Assessments (LIAs).
  • Own and refine the end-to-end processes for Subject Rights Management including Data Subject Access Requests (SARs) and other data subject rights.
  • Manage breaches including investigation, reporting, and communication with the ICO.
  • Contribute to growth by supporting our business development teams with customer data protection agreements and enquiries.
  • Manage risk by conducting due diligence for third-party suppliers and vendors.
  • Raise awareness through design and delivering engaging data protection training and awareness campaigns.
  • Monitor the evolving privacy regulatory landscape and report on the company's compliance and risk.

Qualifications

  • A passion for Data Protection and a proven track record of delivering compliance with legislation in a fast paced business.
  • Experience working with software product teams building bespoke software for delivering customer and internal solutions.
  • Familiarily with modern tooling including Google Workspace and Slack.
  • The ability to explain Data Protection concepts in a clear and relatable way to those who may not be familiar with them.
  • Forward-thinking, self-motivated and able to take responsibility for your own initiatives and drive them to implementation.
  • Experience of working in a pressured environment, prioritising your work appropriately while maintaining high levels of attention to detail.

Skills

Required:Data protection strategy and policy developmentPrivacy by design and DPIA managementSubject Rights Management (SARs)Breach management and ICO communicationData protection training and awarenessRegulatory monitoring and risk reporting
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Octopus Energy

The UK's most awarded energy supplier

Cheaper, greener energy, heat pumps, solar panels, batteries and electric vehicles from Britain's most awarded energy supplier. One of Europe's largest investors in renewable energy. Switch today.

energyrenewable energysolar panelsbatterieselectric vehicles
Company profileWebsite

More open roles at Octopus Energy