Location
Job description
Data Protection Manager Salary: £45,100 - £60,400 per annum Location: Cambridge – Hybrid Contract: Permanent Hours: Full time, 35 hours per week As Data Protection Manager, you will be a driving force in a collaborative team that is embracing change and continually strengthening how we protect personal data and manage information governance. At Cambridge University Press & Assessment, our work supports teaching, learning, research and assessment around the world – and that depends on trust in how we handle information. We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge. As we continue to evolve our privacy, responsible AI and information governance framework, there has never been a better time to join us. This is your opportunity to make a meaningful impact for colleagues across Cambridge, and for the millions of learners, educators and researchers who rely on our products and services worldwide.
About the role You'll be part of a small specialist Privacy team that supports colleagues across Cambridge University Press & Assessment's global operations, working alongside the wider Legal & Business Affairs function. You'll act as a trusted partner to teams across the organisation, helping them navigate privacy and information governance requirements confidently and consistently. You'll also help shape and run Cambridge's privacy, responsible AI and information governance framework—making it easier for teams to do the right thing, every day. Success in this role means delivering responsive, high-quality operational support, maintaining strong governance and records, and spotting opportunities to improve how we manage privacy risk at pace. You'll bring structure, sound judgement and clear communication—balancing compliance with pragmatism. This includes supporting DPIAs and privacy risk assessments, coordinating rights requests and incidents, and producing clear reporting to support decision-making and governance. This position has been classified as a hybrid role, requiring the selected candidate to typically spend 40-60% of their time collaborating and connecting face-to-face at their dedicated location. Aside from our hybrid principles, other flexible working requests will be considered from the first day of employment, including other work arrangements should you require adjustments due to a disability or long-term health condition. About You
You will bring in-depth knowledge of data protection law and privacy practice, including the UK GDPR and Data Protection Act 2018, along with strong analytical skills to assess and manage privacy risk. You are confident handling DPIAs, incidents and individual rights requests, and can translate complex information into clear reporting and insightful recommendations to support effective decision-making and governance. With excellent communication skills, you are experienced in drafting practical, proportionate guidance for non-specialist audiences. You apply sound judgement when working with a wide range of stakeholders, balancing legal, operational and commercial considerations, and are comfortable influencing and constructively challenging where needed. You will also demonstrate a high level of discretion when handling sensitive information, with the ability to prioritise multiple workstreams while maintaining close attention to detail. If you meet the above minimum requirements, we encourage you to apply. Your application will be even stronger if you can also demonstrate the following desirable criteria:
For a detailed job description, please refer to the link at the bottom of the advert on our careers site. We are a Disability Confident (DC) employer that is committed to equality and inclusion ensuring our recruitment process is accessible to all. The DC scheme's Offer of an Interview commitment applies to applicants who opt in, and disclose a disability or a long-term health condition, and who best meet the minimum criteria for the role. In instances where interviewing all qualifying candidates is not practicable and/or appropriate, we prioritise those who best meet the minimum criteria, as we would for applicants who do not have a disability or long-term health condition. Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov.uk website for guidance to understand your own eligibility based on the role you are applying for. Rewards and benefits
We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package, featuring family-friendly and planet-friendly benefits including:
Ready to pursue your potential? Apply now. We aim to support candidates by making our interview process clear and transparent. The closing date for all applications will be Thursday 30 April 2026. We will review applications on an ongoing basis, and shortlisted candidates can expect interviews to take place from week commencing 11 May 2026. If you are shortlisted and progressed through the stages, you can expect:
About the role You'll be part of a small specialist Privacy team that supports colleagues across Cambridge University Press & Assessment's global operations, working alongside the wider Legal & Business Affairs function. You'll act as a trusted partner to teams across the organisation, helping them navigate privacy and information governance requirements confidently and consistently. You'll also help shape and run Cambridge's privacy, responsible AI and information governance framework—making it easier for teams to do the right thing, every day. Success in this role means delivering responsive, high-quality operational support, maintaining strong governance and records, and spotting opportunities to improve how we manage privacy risk at pace. You'll bring structure, sound judgement and clear communication—balancing compliance with pragmatism. This includes supporting DPIAs and privacy risk assessments, coordinating rights requests and incidents, and producing clear reporting to support decision-making and governance. This position has been classified as a hybrid role, requiring the selected candidate to typically spend 40-60% of their time collaborating and connecting face-to-face at their dedicated location. Aside from our hybrid principles, other flexible working requests will be considered from the first day of employment, including other work arrangements should you require adjustments due to a disability or long-term health condition. About You
You will bring in-depth knowledge of data protection law and privacy practice, including the UK GDPR and Data Protection Act 2018, along with strong analytical skills to assess and manage privacy risk. You are confident handling DPIAs, incidents and individual rights requests, and can translate complex information into clear reporting and insightful recommendations to support effective decision-making and governance. With excellent communication skills, you are experienced in drafting practical, proportionate guidance for non-specialist audiences. You apply sound judgement when working with a wide range of stakeholders, balancing legal, operational and commercial considerations, and are comfortable influencing and constructively challenging where needed. You will also demonstrate a high level of discretion when handling sensitive information, with the ability to prioritise multiple workstreams while maintaining close attention to detail. If you meet the above minimum requirements, we encourage you to apply. Your application will be even stronger if you can also demonstrate the following desirable criteria:
- Privacy qualification (e.g., IAPP CIPP/E, CIPM) or equivalent experience
- Hands-on experience leading DPIAs and enabling teams through training and practical guidance
- Experience managing incidents and engaging with regulators and internal stakeholders on remediation
- Comfort working in a complex, matrix or international environment
For a detailed job description, please refer to the link at the bottom of the advert on our careers site. We are a Disability Confident (DC) employer that is committed to equality and inclusion ensuring our recruitment process is accessible to all. The DC scheme's Offer of an Interview commitment applies to applicants who opt in, and disclose a disability or a long-term health condition, and who best meet the minimum criteria for the role. In instances where interviewing all qualifying candidates is not practicable and/or appropriate, we prioritise those who best meet the minimum criteria, as we would for applicants who do not have a disability or long-term health condition. Cambridge University Press & Assessment is an approved UK employer for the sponsorship of eligible roles and applicants under the Skilled Worker visa route. Please refer to the gov.uk website for guidance to understand your own eligibility based on the role you are applying for. Rewards and benefits
We will support you to be at your best in work and to live well outside of it. In addition to competitive salaries, we offer a world-class, flexible rewards package, featuring family-friendly and planet-friendly benefits including:
- 28 days annual leave plus bank holidays
- Private medical and Permanent Health Insurance
- Discretionary annual bonus
- Group personal pension scheme
- Life assurance up to 4 x annual salary
- Green travel schemes
Ready to pursue your potential? Apply now. We aim to support candidates by making our interview process clear and transparent. The closing date for all applications will be Thursday 30 April 2026. We will review applications on an ongoing basis, and shortlisted candidates can expect interviews to take place from week commencing 11 May 2026. If you are shortlisted and progressed through the stages, you can expect:
- First stage virtual interview via MS Teams. (w/c 11 May 2026)Final stage interview: in-person at our offices in Cambridge. You will be provided with a brief to complete a role related task which will need to be returned by email in advance of your interview. (w/c 2