Be the technical bridge between privacy compliance, engineering delivery and architecture governance ensuring privacy principles are implemented effectively throughout the software development lifecycle.
This position requires a unique combination of technical depth, regulatory understanding and agile delivery experience. You ll help turn high-level regulatory and policy requirements into concrete, testable technical stories and controls, directly influencing how privacy-by-design is embedded in digital products and systems.
Responsibilities
Privacy-by-Design in Agile Delivery
- Integrate privacy requirements directly into Agile Release Trains (ARTs) and delivery squads, ensuring privacy is an integral part of feature and system design.
- Consume and apply Non-Functional Requirements (NFRs) to epics, features, and acceptance criteria, ensuring privacy-related considerations are included in delivery planning and execution.
- Support PI planning activities by identifying and escalating privacy risks early, ensuring mitigation actions are incorporated into team objectives.
- Validate delivery outputs post-implementation to confirm privacy requirements are fully met and verifiable.
Technical Assurance & Translation
- Inspect, review, and challenge technical designs, architecture, SDK integrations, and vendor implementations to ensure compliance with internal privacy guardrails.
- Translate ambiguous legal or regulatory intent into clear, testable technical stories and acceptance tests that can be validated through automated pipelines.
- Embed privacy controls and assurance checks within CI/CD workflows, supporting continuous compliance and proactive risk detection.
Incident Response & Coaching
- Act as the primary privacy SME for delivery and platform teams during privacy incidents or investigations.
- Provide technical insight during incident triage, root cause analysis, and remediation planning.
- Coach teams in privacy-preserving engineering practices, including data minimisation, anonymisation/pseudonymisation, and consent management.
Cross-Functional Collaboration
- Collaborate with Product Owners, Architects, Security Engineers and Lega to ensure privacy compliance is aligned with business and technical goals.
- Work closely with Solution Management and Architecture to embed privacy considerations early in design phases.
- Contribute to the continuous improvement of privacy engineering practices across the organisation.
Experience
- Technical Expertise:
- Background in software or data engineering, with hands-on familiarity across data pipelines, APIs, SDKs, client/server tracking, consent tooling, and event-driven systems.
- Understanding of cloud environments, modern data architectures, and identity management principles.
- Privacy & Regulatory Literacy:
- Working knowledge of GDPR, PECR and relevant regulatory guidance from authorities such as the ICO or EDPB.
- Capable of identifying potential compliance risks and escalating to Data Protection or Legal teams when appropriate.
- Agile & SAFe Proficiency:
- Experience embedding Non-Functional Requirements (NFRs) and Behaviour-Driven Development (BDD) practices within agile workflows.
- Comfortable participating in agile ceremonies, including PI Planning, System Demos, and Inspect & Adapt sessions.
- Systems Thinking & Risk Awareness:
- Strong understanding of how data and privacy risks flow across interconnected systems, third parties, and vendor ecosystems.
- Skilled at assessing technical dependencies and highlighting cross-platform privacy implications.
- Collaboration & Communication:
- Excellent stakeholder management skills, with the ability to communicate privacy and compliance requirements to engineers and product teams in clear, actionable terms.
- Proven ability to work across functions particularly with Legal, Product, Compliance, Architecture and Security.
Desirable
- Prior experience in privacy engineering, data protection assurance, or technical compliance roles within large-scale or regulated environments.
- Familiarity with test automation frameworks, DevSecOps pipelines, and continuous compliance tooling.
- Certifications such as CIPT (Certified Information Privacy Technologist), CIPP/E, or SAFe Practitioner/Architect certification.
Contract, outside IR35, London, Consumer Products Electronics
If you’re interested in this opportunity, please email your latest CV with rate and availability. Staffworx Limited are a UK based recruitment consultancy supporting the global digital, E-commerce, software & business consulting sector
