Data, Risk & Compliance Manager

Job DescriptionSummaryAt M&S, our vision is to be the most trusted retailer, doing the right thing for our customers with quality products at the heart of everything we do. Were looking for an experienced data, risk & compliance manager to join the M&S Customer Service Centre, to ensure, with support from the central DPO function, that operational practices in customer services are compliant with data protection laws and internal policy, while overseeing customer data rights requests and data protection complaints. Youll collaborate with Central Teams, Business Continuity, Workplace Services, and HSBC.Keep reading below to find out moreWhats in it for youBeing a part of M&S is exactly that playing your part to bring the magic of M&S to our customers every day. Were an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.Here are some of the benefits we offer that make working for M&S just that little bit more specialAfter completing your probationary period, youll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.Competitive holiday entitlement with the potential to buy extra holiday days!Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.A generous Defined Contribution Pension Scheme and Life Assurance.A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.What youll doYour key accountabilities will include Data protection risk management including maintaining statutory records of processing activity within customer services and conducting Data Protection Risk Assessments (if required).Oversight and supervision of procedures for managing customers rights requests (principally subject access requests and right to be forgotten requests).Oversight of customer services process for handing data protection complaints and dealing with escalated customer data protection concerns or complaintsAdvising customer service colleagues, particularly Exec Team, on data protection compliance. Supporting on data protection compliance aspects of projects within customer services, and supplier on-boardingWorking with Capita to mitigate risk of non-compliance to law and policy, including by training, monitoring, communications, follow up and escalationFact-finding and supporting central DPO team in relation to complaints/ investigations by DP regulators Implementing DP compliance and risk mitigation controls in CSC Supporting on DP compliance as regards systems/platforms.Providing and contributing to data protection training Collation and reporting of DP metricsOversight of Business Continuity plans across all sitesStrong links with Model Office and training teams to ensure robust DP processes Who you areYour skills and experience will include Technical SkillsData focused with an analytical mindset Strong organisational skills, with good ability to prioritise and present data led status updates Working knowledge of data protection legislation, regulation and guidance particularly as it relates to data subjects rights.Good working knowledge of systems and technology used by Customer ServicesStrong communication/ presentation skills with ability to build trusted relationshipsExperience requiredWorked in data protection / privacy compliance role (preferred)Worked in compliance roleExperience in retail or similar sector (preferred)Formal Qualification (preferred but not essential)Data Protection Accreditation BCSIAPPOtherEveryones welcome Were ambitious about the future of retail. Were innovating, disrupting, and leading the way into a more inspiring, digital era. Its an exciting time to be part of M&S.To support us on our journey, were building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.Dont worry if you dont meet every single requirement of the job description. Its more of a guide to whats possible within the role. If youre passionate, ready to work hard, and think the role feels right for you, wed love to hear from you.

Created: 2025-06-23