Legal and Data Protection Manager
Application Deadline: 9 March 2026
Department: Finance and Transformation
Employment Type: Permanent - Full Time
Location: Rail House
Reporting To: Tom Drost
Compensation: £55,000 - £60,000 / year
Description
Job Title: Legal and Data Protection Manager
Location: Liverpool- Rail House (Hybrid work)
Salary: £55,000-£60,000 DOE
Contract Type: Full Time Permanent.
Hours: 35 Hours per week
Your Journey Starts Here
At Merseyrail, we’re committed to operating responsibly, transparently, and in the best interests of our people, customers, and communities.
As part of our Finance & Transformation function, we’re recruiting a Legal and Data Protection Manager to provide practical, commercially focused legal, contractual, and compliance support across the organisation. This role plays a key part in ensuring strong governance, proportionate risk management, and confident decision-making across our business.
Formal legal qualification is not essential – we’re looking for strong, demonstrable experience in practice. Data protection certification (e.g., CIPP/E, CIPM) is desirable but not essential.
Your Day-to-Day
Day-to-day, you’ll support Merseyrail’s legal, contractual, compliance, and data protection activity, ensuring requirements are embedded and effective across the organisation.
This will include:
• Providing clear, practical, and commercially focused legal and compliance advice to stakeholders across Procurement, Projects, and operational teams
• Drafting, reviewing, amending, and negotiating commercial, supplier, framework, and construction-related contracts
• Supporting the development and implementation of compliance frameworks, governance processes, and policies, ensuring awareness of relevant legislation and regulatory change
• Ensuring contractual arrangements appropriately embed UK GDPR requirements and supporting the business in understanding associated privacy obligations
• Managing key data protection activities, including DSARs, DPIAs, data breach investigations, and maintenance of privacy documentation
• Providing objective analysis of contractual, compliance, and privacy risks, working with internal and external stakeholders to support proportionate, risk-based decisions
What You’ll Bring to Merseyrail
• Strong experience providing legal and compliance support in a commercial or operational environment
• Proven experience drafting, reviewing, and negotiating commercial agreements
• Practical experience delivering GDPR processes, including DSARs, DPIAs, and breach management
• Confidence communicating complex legal or compliance issues clearly to non-legal stakeholders
• A pragmatic, solutions-focused approach with strong judgement and attention to detail
Why Choose Merseyrail
Our people are at the heart of our success. We rely on every employee to help deliver the best possible experience for our customers, and that’s why we believe in recognising and rewarding great work. When you join Merseyrail, you’ll have access to an extensive and competitive range of benefits designed to support you both professionally and personally.
The Benefits of Being Onboard
• Final salary pension scheme
• Free staff travel on our network – unlimited free travel on Transport UK train operators and Northern
• Discounted national rail travel – 75% discount on other train services across the UK, expanding to Europe after one year of service
• Family rail travel – your partner and dependents can also benefit from rail travel passes
• Health Shield membership – access discounted health and holistic care services
• Access to GP Anytime – speak face-to-face with a qualified GP, whenever you need to
• Hapi benefits portal – enjoy savings on shopping, lifestyle and holidays
• Wedding celebrations – take an extra day off if you get married on a working day
• Employee achievement and long service awards
• Involvement in major city events – play a key role in keeping our city moving during major events, working together as one team
What You Need to Know
Merseyrail reserves the right to close this advert early if we receive a high volume of applications. Incomplete applications may not be progressed or given additional time to complete in these circumstances.
Diversity Drives Us
As an equal opportunities employer, Merseyrail particularly welcomes applications from Black, Asian, Minority, Ethnic (BAME) backgrounds as they are currently underrepresented. All appointments will be made on merit of skill and experience relative to the role.
Using AI? Be Authentically You
We understand some applicants may use AI tools to help refine their applications, and that’s fine. However, we’re most interested in your experience, in your words. Answers that feel overly generic or lack personal insight may be discounted, so please make sure your responses reflect you.Â