Privacy Specialist

Privacy Technologist / Tech Lead Consultant Contract, outside IR35, London Hybrid. You will act as the bridge between privacy compliance, engineering delivery and architecture governance, ensuring privacy principles are implemented effectively throughout the software development lifecycle. This role requires a deep technical background, regulatory knowledge and strong agile delivery experience. You will convert high‑level regulatory and policy requirements into concrete, testable technical stories and controls, directly influencing how privacy‑by‑design is embedded in digital products and systems. Responsibilities Privacy‑by‑Design in Agile Delivery Integrate privacy requirements directly into Agile Release Trains (ARTs) and delivery squads, ensuring privacy is an integral part of feature and system design. Apply Non‑Functional Requirements (NFRs) to epics, features and acceptance criteria, embedding privacy considerations in delivery planning and execution. Support PI planning by identifying and escalating privacy risks early, ensuring mitigation actions are incorporated into team objectives. Validate delivery outputs post‑implementation to confirm privacy requirements are fully met and verifiable. Technical Assurance & Translation Inspect, review and challenge technical designs, architecture, SDK integrations and vendor implementations to ensure compliance with internal privacy guardrails. Translate ambiguous legal or regulatory intent into clear, testable technical stories and acceptance tests that can be validated through automated pipelines. Embed privacy controls and assurance checks within CI/CD workflows, supporting continuous compliance and proactive risk detection. Incident Response & Coaching Act as the primary privacy SME for delivery and platform teams during privacy incidents or investigations. Provide technical insight during incident triage, root cause analysis and remediation planning. Coach teams in privacy‑preserving engineering practices, including data minimisation, anonymisation/pseudonymisation and consent management. Cross‑Functional Collaboration Collaborate with Product Owners, Architects, Security Engineers and Legal to ensure privacy compliance aligns with business and technical goals. Work closely with Solution Management and Architecture to embed privacy considerations early in design phases. Contribute to the continuous improvement of privacy engineering practices across the organisation. Experience Technical Expertise: Background in software or data engineering, with hands‑on experience in data pipelines, APIs, SDKs, client/server tracking, consent tooling and event‑driven systems. Understanding of cloud environments, modern data architectures and identity management principles. Privacy & Regulatory Literacy: Working knowledge of GDPR, PECR and relevant regulatory guidance from authorities such as the ICO or EDPB. Capability to identify potential compliance risks and escalates to Data Protection or Legal teams when appropriate. Agile & SAFe Proficiency: Experience embedding NFRs and Behaviour‑Driven Development (BDD) practices within agile workflows. Comfortable participating in agile ceremonies, including PI Planning, System Demos and Inspect & Adapt sessions. Systems Thinking & Risk Awareness: Strong understanding of how data and privacy risks flow across interconnected systems, third parties and vendor ecosystems. Skilled at assessing technical dependencies and highlighting cross‑platform privacy implications. Collaboration & Communication: Excellent stakeholder management skills, with the ability to communicate privacy and compliance requirements to engineers and product teams in clear, actionable terms. Proven ability to work across functions particularly with Legal, Product, Compliance, Architecture and Security. Desirable Prior experience in privacy engineering, data protection assurance or technical compliance roles within large‑scale or regulated environments. Familiarity with test automation frameworks, DevSecOps pipelines and continuous compliance tooling. Certifications such as CIPT (Certified Information Privacy Technologist), CIPP/E or SAFe Practitioner/Architect certification. If you are interested in this opportunity, please email your latest CV with rate and availability. Staffworx Limited is a UK‑based recruitment consultancy supporting the global digital, e‑commerce, software and business consulting sector. #J-18808-Ljbffr