Privacy Engineer / PrivacyTech Consultant

In this role you drive privacy-by-design within agile delivery, turning regulatory intent into concrete technical controls and tests. You act as the bridge between privacy regulation, engineering delivery and architectural governance to embed privacy across the SDLC. You will translate GDPR/PECR guidance into actionable user stories, automated checks and CI/CD integrations. The position blends software/data engineering depth with privacy expertise and adaptable delivery. You join a cross-functional environment focused on building privacy-conscious platforms and services.

• remote working

• Embed privacy requirements into Agile Release Trains and delivery squads from concept to release
• Apply Non-Functional Requirements across epics, features and acceptance criteria
• Support PI planning by identifying and escalating privacy risks early
• Validate delivery outputs post-deployment to ensure privacy controls are implemented and verifiable
• Review and challenge system designs, architecture, SDK and vendor solutions against internal privacy standards
• Translate legal/regulatory requirements into clear technical stories and testable acceptance criteria
• Integrate privacy controls and automated assurance checks into CI/CD pipelines
• Collaborate with Product, Architecture, Security and Legal partners
• Influence design decisions to ensure privacy alignment with objectives
• Help evolve privacy engineering frameworks and best practices across the organisation

• Experience in software/data engineering or similar technical role
• Familiarity with data pipelines, APIs, SDKs, client-server tracking, consent tech, event-driven systems
• Knowledge of cloud environments, modern data architectures and identity management
• Understanding of GDPR, PECR and guidance from regulators (ICO, EDPB)
• Ability to identify compliance risks and engage legal/privacy stakeholders appropriately
• Experience embedding NFRs and BDD into agile delivery
• Comfortable in PI planning, system demos and Inspect-and-Adapt sessions
• Strong grasp of data flows, system interdependencies and third-party risk
• Previous privacy engineering/data protection assurance experience in regulated or large-scale environments (Nice to Have)
• Familiarity with AdTech, MarTech, Cloud Native, SaaS (Nice to Have)
• Knowledge of DevSecOps, test automation and continuous compliance tooling (Nice to Have)
• Relevant certifications (CIPT, CIPP/E, CIPM, IAPP, SAFe, etc.) (Nice to Have)

• Cross-functional collaboration
• Analytical thinking
• Attention to detail
• Privacy-by-design
• Regulatory translation to technical stories
• CI/CD and automated assurance checks