Data Protection Manager

We’re the people behind the global loyalty currency, Avios, and home to three ambitious, growing businesses; IAG Loyalty, British Airways Holidays and The Wine Flyer. Each business has its own goals and strategy, but collectively we create brilliant experiences for our global customers.

We’re on a truly exciting journey of growth and transformation – we’re going places! This is where you come in.

The Data Protection team, sitting in the Legal Operations and Compliance Team, is responsible maintaining and shaping the IAG Loyalty’s Data Privacy Programme, ensuring compliance with applicable regulation and internal policies across a dynamic and fast-paced organisation.

Reporting to the Data Protection Officer, you will play a crucial role in embedding data protection principles through the business. Your responsibilities will include driving a Privacy by Design approach, ensuring that data privacy is integrated into new initiatives, projects, and existing processes. You will have the chance to influence and support the business in addressing complex data privacy challenges, promoting a culture of awareness, managing data protection risks, and safeguarding personal data in today’s evolving regulatory landscape.

The Data Protection Manager will support the ongoing compliance with Data Protection requirements within IAG Loyalty and its businesses, including the following areas:

• Data Privacy Governance: Support the Data Protection Officer in the development and implementation of the Data Privacy Programme and the maintenance of Data Protection Policies and guidelines across the various business.

• Training and Awareness: Delivery of training and awareness to IAG Loyalty colleagues to build a culture of Data Privacy within IAG Loyalty and its subsidiaries.

• Data Subjects Rights: Lead the coordination and management of Data subject Rights requests, engaging when required with internal stakeholders and Group Companies.

• Data mapping and register: Assist in the maintenance of Records of Processing Activities.

• Advising colleagues: Provide advice to colleagues across the different businesses in relation to Data Privacy on new and existing projects, product proposals, new ventures and business as usual activities. Provide advice, guidance and input into Data Privacy Impact Assessments and Legitimate Interest Assessments, as well as ensuring all data protection principles are met, including transparency.

• Third Parties: Support the provision of data protection contractual terms when working personal data with third parties working closely with the Contracts Team, as well as due diligence process along the Security Team.

• Data Breaches: Assist with the investigation of data breaches and complaints, working closely with the Data Protection Officer and the Risk Team while supporting the business.

We need people who know about the data privacy landscape, the pertinent approaches and the likely challenges. Strong stakeholder management skills and a demonstrable track record of successfully influencing without direct control will be key to the success of this individual:

• Experience in data protection, privacy, or related compliance roles, ideally within a complex environment.

• Extensive experience of operational application of EU and UK privacy law, including the GDPR, UK DPA 2018 and PECR.

• Knowledge of information technology and data management systems.

• Privacy and/or Information Security qualification (e.g. CISSP, CISM, CIPP/E, CIPM, CIPT, ISEB) are desirable.

• Strong communication and interpersonal skills.

• Strong analytical and problem-solving skills, using original thinking to find solutions to potential issues and using own discretion to find the balance between data protection compliance and the operational side of the processes.

• The ability to work remotely, be self-organised, prioritisation skills and to independently manage the workload.

• Ability to work under pressure and respond to different requirements often within tight deadlines across the business.

In return you’ll get perks that take you places: ✈️

• Access to non-contractual Annual Bookable Travel Concessions for you and up to 3 nominees

• Unlimited standby and premium standby fares for you and your nominees on the full British Airways network and numerous other partner airlines from day one

• 20 days working from abroad in Europe per annum.

• Annual Bonus (dependant on company and individual performance)

• Company pension of 9% (6% contribution from IAGL, 3% employee contribution)

• 26 days annual leave, + 2 days charity leave

• New joiner, birthday and recognition Avios