We’re looking for an experienced People Data, Privacy and Governance professional to play a pivotal role in how we protect and manage people data across Lockton’s global People function.

Sitting at the intersection of People, Legal, Privacy and Technology, you’ll help ensure that the technology and solutions we introduce are designed with privacy, responsible data use and regulatory compliance at their core.

This is an exciting opportunity to influence a global People Technology transformation, helping us navigate an increasingly complex international privacy and AI regulatory landscape. You’ll translate complex legislation into practical, proportionate solutions that enable innovation while protecting our people and our business.

You’ll work across global and regional teams to shape how people data is collected, accessed, stored, processed, transferred and retained throughout the employee and candidate lifecycle.

A key part of the role will be helping Lockton navigate the rapidly developing area of AI and automated decision-making within People Technology.

You’ll be responsible for:

• Acting as the privacy and data governance lead across global People Technology transformation initiatives.
• Defining and maintaining our People data governance model, including appropriate access, ownership, sharing, retention and controls.
• Embedding privacy by design and privacy by default into new technology, system enhancements, integrations and People processes.
• Monitoring global privacy legislation and translating regulatory change into practical requirements for People, Technology and local teams.
• Ensuring ongoing compliance with UK and EU GDPR and relevant privacy regulation across the jurisdictions in which we operate.
• Leading privacy assessments, including DPIAs, LIAs and DTIAs, for new solutions and significant changes.
• Working with regional privacy specialists on data residency, localisation, data sovereignty and cross-border data transfers.
• Reviewing solution designs and integrations to ensure personal and special category data is appropriately protected.
• Supporting the development and maintenance of privacy policies, procedures, governance metrics and reporting.
• Working closely with HR, Legal, Technology and Change teams to ensure privacy requirements and controls are understood and successfully adopted.
• Assessing the privacy and security position of technology vendors and implementation partners.
• Contributing a privacy perspective to contracts and agreements, including DPAs, SOWs and MSAs.
• Supporting audits and leading remediation activity arising from privacy assessments, regulatory reviews or identified control gaps.

You should have the following experience:

• Demonstrable experience leading data privacy in a global, multi-jurisdiction environment, ideally with a focus on people data.
• Deep, practical knowledge of GDPR and a working understanding of major international privacy regimes.
• Proven experience conducting Privacy assessments.
• Recognised privacy certification, such as CIPP/E, CIPM.
• Strong understanding of HR technology platforms (Workday strongly preferred) and how people data flows across integrated systems.
• Experience embedding privacy into large-scale people technology / transformation programmes.
• Ability to review contractual and legal documents (DPAs, SOWs, MSAs) from a privacy standpoint.
• Confident advising and influencing senior and executive stakeholders, across different business functions, cultures and geographies, translating complex regulation into clear business actions.