Find us on LinkedIn too 👉
Merseyrail logo

Legal and Data Protection Manager

Merseyrail
22 days ago
Full-time
On-site
Liverpool, England, United Kingdom
£55,000 - £60,000 GBP yearly
Data Protection

Legal and Data Protection Manager

Application Deadline: 9 March 2026

Department: Finance and Transformation

Employment Type: Permanent - Full Time

Location: Rail House

Reporting To: Tom Drost

Compensation: £55,000 - £60,000 / year



Description

Job Title: Legal and Data Protection Manager
Location: Liverpool- Rail House (Hybrid work)
Salary: £55,000-£60,000 DOE
Contract Type: Full Time Permanent.
Hours: 35 Hours per week

Your Journey Starts Here

At Merseyrail, we’re committed to operating responsibly, transparently, and in the best interests of our people, customers, and communities.

As part of our Finance & Transformation function, we’re recruiting a Legal and Data Protection Manager to provide practical, commercially focused legal, contractual, and compliance support across the organisation. This role plays a key part in ensuring strong governance, proportionate risk management, and confident decision-making across our business.

Formal legal qualification is not essential – we’re looking for strong, demonstrable experience in practice. Data protection certification (e.g., CIPP/E, CIPM) is desirable but not essential.



Your Day-to-Day

Day-to-day, you’ll support Merseyrail’s legal, contractual, compliance, and data protection activity, ensuring requirements are embedded and effective across the organisation.

This will include:
• Providing clear, practical, and commercially focused legal and compliance advice to stakeholders across Procurement, Projects, and operational teams
• Drafting, reviewing, amending, and negotiating commercial, supplier, framework, and construction-related contracts
• Supporting the development and implementation of compliance frameworks, governance processes, and policies, ensuring awareness of relevant legislation and regulatory change
• Ensuring contractual arrangements appropriately embed UK GDPR requirements and supporting the business in understanding associated privacy obligations
• Managing key data protection activities, including DSARs, DPIAs, data breach investigations, and maintenance of privacy documentation
• Providing objective analysis of contractual, compliance, and privacy risks, working with internal and external stakeholders to support proportionate, risk-based decisions



What You’ll Bring to Merseyrail

• Strong experience providing legal and compliance support in a commercial or operational environment
• Proven experience drafting, reviewing, and negotiating commercial agreements
• Practical experience delivering GDPR processes, including DSARs, DPIAs, and breach management
• Confidence communicating complex legal or compliance issues clearly to non-legal stakeholders
• A pragmatic, solutions-focused approach with strong judgement and attention to detail


Why Choose Merseyrail

Our people are at the heart of our success. We rely on every employee to help deliver the best possible experience for our customers, and that’s why we believe in recognising and rewarding great work. When you join Merseyrail, you’ll have access to an extensive and competitive range of benefits designed to support you both professionally and personally.

The Benefits of Being Onboard

• Final salary pension scheme
• Free staff travel on our network – unlimited free travel on Transport UK train operators and Northern
• Discounted national rail travel – 75% discount on other train services across the UK, expanding to Europe after one year of service
• Family rail travel – your partner and dependents can also benefit from rail travel passes
• Health Shield membership – access discounted health and holistic care services
• Access to GP Anytime – speak face-to-face with a qualified GP, whenever you need to
• Hapi benefits portal – enjoy savings on shopping, lifestyle and holidays
• Wedding celebrations – take an extra day off if you get married on a working day
• Employee achievement and long service awards
• Involvement in major city events – play a key role in keeping our city moving during major events, working together as one team

What You Need to Know

Merseyrail reserves the right to close this advert early if we receive a high volume of applications. Incomplete applications may not be progressed or given additional time to complete in these circumstances.

Diversity Drives Us

As an equal opportunities employer, Merseyrail particularly welcomes applications from Black, Asian, Minority, Ethnic (BAME) backgrounds as they are currently underrepresented. All appointments will be made on merit of skill and experience relative to the role.

Using AI? Be Authentically You

We understand some applicants may use AI tools to help refine their applications, and that’s fine. However, we’re most interested in your experience, in your words. Answers that feel overly generic or lack personal insight may be discounted, so please make sure your responses reflect you.Â