Fractional Privacy & Security Lead

General

∙

UK / Europe (remote)

∙

August 11, 2026

∙

Contract | Fractional, ongoing engagement

Our client is a well-established consumer goods company operating in the health, wellness, and lifestyle space. The company sells its products directly to customers through a large network of independent ambassadors and partners. This community-driven business model involves processing a high volume of customer, ambassador, and partner data across multiple digital platforms.

The company is strengthening its data protection and privacy framework and is looking for an experienced specialist to bring clear ownership, structure, and practical governance to these areas.

They are looking for a Fractional Data Protection & Privacy Lead to take ownership of the company’s privacy processes, documentation, policies, and governance standards.

The initial priority will be reviewing the company’s current UK GDPR practices, completing the existing privacy documentation backlog, and establishing clear, reusable data protection procedures. After the initial 90-day period, the specialist will provide ongoing privacy oversight and support as required.

Responsibilities

Initial 90-day priorities
- Review current UK GDPR processes and identify compliance gaps;
- Establish reusable procedures for SARs and DSARs, rectification, erasure, and other individual rights requests;
- Complete and maintain UK and US privacy documentation, including DPIAs, LIAs, TRAs, TIAs, and the Record of Processing Activities;
- Review consent-management requirements and assess suitable tooling, including OneTrust;
- Establish the practical use of Microsoft 365 compliance capabilities, including data labelling, DLP, retention, and deletion;
- Finalise and update the company’s data protection, privacy, and cookie policies;
- Define clear ownership, responsibilities, and workflows for ongoing privacy compliance.
Ongoing responsibilities
- Maintain and update privacy policies, procedures, and compliance documentation;
- Provide guidance on individual rights requests and privacy-related matters;
- Keep the ROPA and other required assessments up to date;
- Monitor changes in relevant UK and US privacy requirements;
- Support the business in maintaining practical and consistent privacy standards;
- Coordinate privacy-related actions with internal teams and external specialists.

Requirements

Strong practical experience with UK GDPR and privacy operations;
Hands-on experience managing SARs or DSARs, rectification, erasure, and other individual rights requests;
Experience preparing DPIAs, LIAs, ROPAs, TRAs, TIAs, privacy policies, and related compliance documentation;
Experience working in-house within a direct-selling, e-commerce, retail, beauty, wellness, or other consumer-facing business;
Good understanding of consent management, data retention, deletion, and privacy governance;
Familiarity with Microsoft 365 compliance capabilities, including Purview, DLP, retention, and data labelling;
Knowledge of US privacy requirements and consent-management platforms such as OneTrust;
Ability to create clear, practical processes and coordinate their implementation across different teams;
Ability to work independently and provide senior-level privacy guidance on a fractional basis;
Direct selling, e-commerce, retail, or other consumer-sector experience;
Upper-Intermediate English level or higher.

Bonus points for

Experience working with ambassador, distributor, or partner networks.

We offer excellent benefits, including but not limited to

A fully remote, long-term fractional engagement;
A flexible schedule aligned with UK working hours.

Fractional Privacy & Security Lead

Responsibilities

Requirements

Bonus points for

We offer excellent benefits, including but not limited to

Application form

Application form

Fractional Privacy & Security Lead

Responsibilities

Requirements

Bonus points for

We offer excellent benefits, including but not limited to

Application form

We use cookies

Application form