Data Protection SME - Third Party Risk Management (TPRM)

Contract: Nov-end of Jan initially

Client: Financial services

Day rate: up to -700 inside IR35

Role Purpose

We are seeking an experienced Data Protection Subject Matter Expert (SME) to support the Third-Party Risk Management (TPRM) function within a Business-as-Usual (BAU) team. The role will provide specialist data protection expertise to support supplier risk assessments, evidence reviews, reporting, and continuous improvement activities across the supplier assurance lifecycle.

The successful candidate will work closely with the Data Protection Manager to assess supplier controls, review supporting evidence and attestations, identify risks and remediation opportunities, and contribute to the ongoing effectiveness of the TPRM framework.

• Review supplier-submitted data protection evidence and attestations as part of the TPRM assessment process.
• Assess the adequacy and effectiveness of privacy, data protection, and information governance controls.
• Provide expert guidance and recommendations to support risk-based assessment decisions.
• Support the Data Protection Manager in evaluating supplier compliance with applicable data protection requirements and organisational standards.