Data Protection Manager

Whsmithcareers; Swindon; Hybrid; GBP 42,000 - 50,000; Full time

Job summary

A leading UK retail support company is seeking a Data Protection Manager based at their Swindon Support Centre. The role focuses on ensuring compliance with UK GDPR and enhances the data protection framework. Ideal candidates should possess CIPP/E and CIPM qualifications, have experience in data protection, and strong communication skills. This position offers a competitive salary along with benefits such as a car allowance and private medical scheme. The company promotes a collaborative culture and values its people highly.

Benefits

Car allowance

Private medical scheme

25 days holiday plus bank holidays

Early finish on Fridays

Qualifications

• Must have demonstrable experience in data protection and risk management in a commercial or retail sector.
• Strong understanding of data privacy regulations and ICO guidance.
• Ability to perform audits and DPIAs to prescribed standards.

Responsibilities

• Oversee compliance with UK GDPR and other relevant regulations.
• Manage data protection incidents and ensure timely resolution.
• Provide training and guidance to enhance data protection awareness.

Skills

Data protection compliance

Risk management

Strong communication

Team collaboration

IT skills (Microsoft Office)

Project management support

Education

CIPP/E and CIPM or equivalent qualifications

Job description

Data Protection Manager

Location; Swindon Support Centre (hybrid working with 3 days per week in the office)

Salary; upto £50,000 plus car allowance + private medical

With a rich heritage and a new name, TGJones is the fresh face of a much-loved and trusted British brand. Our roots lie in WHSmith, where we’ve proudly supported the high street retail estate for generations. Now, under the ownership of specialist retail investors, Modella Capital, we’re entering an exciting new chapter with bold ambitions to become ‘Your Hub of the High Street’.

About the role

We’re seeking a Data Protection Manager, responsible for contributing to the overall corporate governance and effective risk management of the business, this role forms part of the Legal & Compliance team, who are based in our Support Centre in Swindon.

The Data Protection Manager reports to the Legal Director and Company Secretary. You will oversee the organisation’s day-to-day compliance with UK GDPR, PECR, and other relevant regulations. The role includes improving our data protection framework and acting as the primary contact for all data protection matters. You will serve as the subject matter expert, advising the business on policies, processes, breach management, marketing compliance, individual rights, and training. A key responsibility is embedding a strong culture of data protection across the new company.

• Ensuring compliance with CCTV regulations including third party access requests
• Manage any data protection incidents, ensuring timely reporting and resolution
• Developing and enhancing data protection related processes and data protection framework
• Reviewing DPIAs for new systems, suppliers and activities
• Providing training and guidance to employees to enhance data protection awareness
• Reviewing and supporting with any Individual Rights Requests
• Managing and updating policies and transparency notices such as Privacy Notices
• Manage data subject complaints and regulatory enquiries
• Reviewing RoPAs and other registers
• Providing data handling guidance to our stores
• Providing project support when new systems are considered, or new marketing activities are designed
• Working cross-functionally with various teams, including Loss Prevention and Information Security, to ensure data protection requirements are met
• Configuring the TGJones website OneTrust Cookie Preference Centre and regular cookie scans
• Staying up to date and reporting on the latest developments in data protection laws and regulations
• Continuously improving the data protection framework and culture of the business

About you

We’re looking for ambitious professionals who are focused on shaping a purposeful, long-term career - not merely pursuing their next opportunity. We value individuals who bring curiosity, strategic thinking, and a passion for innovation. At our Support Centre, you’ll be part of a dynamic, future-focused organisation that champions collaboration, continuous growth, and meaningful impact.

• CIPP/E and CIPM or equivalent data protection qualifications (preferable)
• Demonstratable experience in data protection and risk management in (preferably) a commercial or retail sector setting
• Strong understanding of data privacy and data protection regulation and ICO guidance
• Knowledge of how to perform audits and DPIAs to prescribed standards
• Ability to coordinate activities and maintain confidentiality whilst working with internal and external stakeholders
• Excellent communication (verbal and written)
• Ability to work independently and collaboratively
• Excellent interpersonal skills and the ability to build strong relationships
• A strong team player with initiative and drive
• Excellent IT skills using the full Microsoft Office Suite

This role will suit a self-starter who can set up the data protection accountability framework for the new company and quickly build a network of data champions to support the function. You will have a high degree of autonomy and will have the opportunity to develop your skills and knowledge in a supportive environment. This is an exciting opportunity for someone looking for a senior data protection role in a fast-paced, innovative and creative environment.

About us

Joining TGJones means becoming part of a company that values its people as its greatest asset. We are a team that values people, invests in development, and encourages ideas. We foster an inclusive, collaborative and supportive culture where everyone is empowered to make a difference. Whether you’re just starting out or looking to take the next step in your career, TGJones offers a welcoming environment, real opportunities to grow, and the satisfaction of working for a company that genuinely cares.

Company benefits for our Support Centre colleagues include 4pm Friday finish, 25 days holiday plus bank holidays, your birthday off, car allowance, private medical scheme, holiday trading scheme, annual company bonus, family friendly leave, employee discounts, free coffee Wednesdays and much more!

At TGJones, we’re all about creating an inclusive and welcoming workplace where everyone can be themselves and do their best. No matter your background, age, disability, gender, gender expression, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or anything else that makes you, you - you’re welcome here. If you need any adjustments during the selection process, just let our Talent Acquisition team know—we’re happy to help!