Privacy & Compliance Coordinator
Location: Birmingham (Hybrid)
Closing Date: 12th November 2026
Are you highly organised, detail-oriented and passionate about data protection and compliance? We're looking for a proactive Privacy and Compliance Coordinator to join our Risk and Compliance team.
Reporting to the Head of Risk and Compliance, you will play a key role in supporting the delivery of our privacy, information governance and compliance activities. Working across the business, you'll help ensure we meet our regulatory obligations, maintain accurate records and support a culture of compliance.
This is an excellent opportunity for someone looking to develop or build a career in privacy, information governance or compliance within a collaborative and supportive environment.
What You'll Be Doing
As our Privacy and Compliance Coordinator, you'll provide operational and administrative support across a wide range of compliance activities, including:
- Managing and triaging the Data Protection and Compliance inboxes, responding to routine enquiries and directing more complex queries appropriately.
- Coordinating and monitoring Subject Access Requests (SARs), Freedom of Information (FOI) requests, Environmental Information Regulation (EIR) requests and other data subject rights requests, ensuring deadlines are met.
- Monitoring customer and employee GDPR rights requests across Arriva and CrossCountry systems.
- Maintaining and updating the Record of Processing Activities (ROPA) and other information governance registers.
- Supporting the review and maintenance of data protection policies, procedures, guidance and process documentation.
- Monitoring mandatory compliance training and following up with colleagues and managers to ensure timely completion.
- Assisting with compliance monitoring, internal audits, assurance reviews and action tracking.
- Producing reports, dashboards and management information to support the Risk and Compliance function.
- Maintaining Risk and Compliance SharePoint sites, registers, trackers and records.
- Building positive working relationships across the business to promote good data protection and information governance practices.
- Supporting awareness campaigns and communications relating to privacy, compliance and information governance.
- Assisting with wider Risk and Compliance projects and initiatives as required.