UK remote
Data Protection Expert
About this role
Want to be part of a UK hub, in a global business that is scaling rapidly, evolving fast and radically changing the decades-old delivery universe? If so, read on, as we’re looking for a Data Protection Expert to join our Legal and Compliance team! Our mission? To switch up the status quo and become the UK’s leading out-of-home business. With a fast-growing network of thousands of smart lockers, hundreds of leading retail partners and the launch of our transformative Send service, we’re bringing freedom to anyone with a parcel.
At InPost UK, we’re building an unparalleled group of talent that’s committed to help us power our mission to reshape the way parcels move, and redefine eCommerce logistics. Our team is packed full of top-notch experts in e-commerce, technology, scale-up growth, sustainability, logistics and supply chain. We’re a passionate bunch with high ambition – we collaborate, innovate, support each other, and leave egos at the door.
About the role: The Data Protection Expert strengthens privacy and data protection across InPost's UK business, working within the Personal Data Protection Team (Legal, Compliance and GDPR Office). Acting as a trusted privacy advisor, you'll operate independently, build credibility across stakeholder groups, and support the Group Data Protection Officer in meeting the organisation's data protection obligations. You'll also line-manage a Privacy Specialist or Junior Privacy Specialist, and take the lead on complex matters and key escalations alongside senior privacy leadership.
You'll navigate genuinely complex, high-stakes territory — from assessing significant personal data breaches to advising on novel uses of data and AI where there's no established precedent. Working from principles rather than rigid procedure, you'll balance regulatory requirements, business needs and reputational risk, with the backing of senior privacy leadership on the biggest calls. It's a role with company-wide impact, at the heart of how InPost earns and keeps its customers' trust.
What you'll own Personal data risk & incident management — Assess and analyse data-protection risks and personal data breaches, overseeing the incident management process from assessment through investigation to follow-up. Data subject requests & stakeholder responses — Handle data subject requests and prepare internal and external responses within regulatory deadlines. Data protection documentation & standards — Create, maintain and update registers, procedures, policies and guidelines.