Location
London

Hours
Full Time

Salary
Competitive, commensurate with experience

About the Role
Alto Software Group is a B2B SaaS company powering more than half of all UK housing transactions annually. We create software solutions that connect businesses and consumers, delivering a one-stop shop for estate agents and home builders. Our goal is to drive efficiency, speed up transactions, reduce risk, and improve the end-customer experience. While not a start-up, we operate with a start-up mindset to achieve ambitious goals.

We are seeking a Data Privacy & Compliance Specialist to own our individual rights and privacy compliance function. As our product reaches more of the UK housing market, the volume and complexity of our data obligations grow. This role provides specialist capacity to manage these obligations with rigour and care.

You will be the go-to expert on UK GDPR, individual rights, and data-related complaints, working across the business at the intersection of legal compliance and operational impact. Key responsibilities include managing Data Subject Access Requests (DSARs), Right to Erasure, and Portability requests; reviewing personal data extracts with GDPR exemptions; responding to privacy complaints; supporting investigations of data breaches; maintaining the Record of Processing Activities (ROPA); assisting with Data Protection Impact Assessments (DPIAs); providing practical guidance to teams; and delivering privacy awareness sessions to staff.

Experience
- Proven experience in a dedicated data protection or privacy compliance role within a UK-based organisation.
- Deep working knowledge of UK GDPR, the Data Protection Act 2018, PECR, and the Data Use and Access Act (DUAA).
- Hands-on experience managing DSARs end to end, including redaction, application of exemptions, and meeting statutory deadlines.
- Familiarity with maintaining ROPA and conducting or supporting DPIAs.
- Experience with redaction software and case management tools; comfortable navigating business systems to locate personal data across platforms.
- Strong written communication skills, able to produce clear, legally accurate responses to individuals and regulators.
- Calm and methodical approach to complaint handling and incident response, especially under time pressure.

About you
Passionate about data privacy and improving the home moving and owning experience for everyone. You are pragmatic, detail-oriented, and able to translate legal obligations into practical actions. You thrive working collaboratively across teams and enjoy taking ownership of compliance functions with strategic visibility and cross-business influence.

Qualifications
A relevant qualification such as BCS Certificate in Data Protection, CIPP/E, or equivalent is a plus but not essential. We value passion and willingness to learn above all.