Data Governance Consultant

Pivotal Collaborative (London)

Full or part-time

Fixed-term

Your mission

CONTEXT & BACKGROUND
Pivotal is looking for a consultant with strong data governance experience in the UK Financial Services market. We are running a programme to migrate personal data records which sit across onboarding, transactional, AML/KYC, complaints and communications systems, governed by the Pivotal’s Board-approved Data Protection Policy, Data Retention Schedule, DPIA Framework and ROPA Register, under UK GDPR, the Data Protection Act 2018 and FCA SYSC / Consumer Duty requirements.

The target platform where the data records will sit has not yet been selected; evaluating and recommending options for the data platform is part of this engagement and the consultant’s scope, working alongside Pivotal senior stakeholders.

Technical migration and data engineering:

Audit source systems, data quality, and volumes; produce source-to-target data mapping
Recommend and help select the target central data platform and migration architecture
Design and execute a phased extract-transform-load (ETL) migration plan, including reconciliation, validation and rollback procedures
Manage cutover, go-live support and post-migration stabilisation
Deliver the migration of 10 million+ records to a new central system of record, and to establish the controls required to keep that system compliant on an ongoing basis
Engage the source provider's DPO (or equivalent) to agree the data migration approach, provide guidance on legal agreement, and put the required transfer controls in place
Complete DPIA for target system and plan for residual risks
Define testing requirement and access controls.

Data protection and compliance oversight:

Review Pivotal’s Data Protection Policy, Retention Schedule, DPIA Framework and ROPA Register, and make recommendations as required
Confirm the migration’s lawful basis, necessity and data minimisation
Complete a Data Protection Impact Assessment (DPIA) for the migration using the Company’s Annex A template, for DPO / Board sign-off prior to go-live
Update ROPA entries and retention cross-mapping to reflect the new system and data flows
Ensure access controls, encryption, audit logging and retention/deletion rules in the target system meet Company and regulatory standards

Your profile

Engagement to commence on appointment (expected early November 2026) for an initial period of 3 months. The duration of this engagement might extend beyond the initial 3-month period, either as an extension of the consulting agreement or as an appointment to a permanent position in Pivotal.
Migration and control framework to be fully complete and signed off before February 2027.
The consultant will have a dual reporting line:
1. Pivotal’s Risk Director (in their capacity as Data Protection Lead)
2. Pivotal’s Technology Transformation Director
The consultant will deliver agreed deliverables, against set milestones, and ensure any residual high-risk findings escalated to Pivotal stakeholders (and ultimately to Pivotal’s leadership) in line with the DPIA Framework.

About us

Pivotal is the UK’s leading mortgage and protection advice group. Backed by LSL and Pollen Street Capital, we’ve rapidly built a nationwide network of industry-leading specialist teams with over 1,000 talented people – together delivering annual revenues exceeding £100 million. Our scale is matched by our specialism. Pivotal’s advisor teams cover every corner of the market – from mainstream residential to second charge, commercial, bridging, buy-to-let, landlord, protection, and home insurance.

Our brands include Embrace Financial Services, First2Protect, Lifetime Finance Group, Grange Mortgage & Protection Services, The Buy to Let Broker, The Loan Partnership, John Charcol, Believe Money, and many other specialist mortgage, lending, protection and insurance businesses across the UK, giving us unrivalled expertise across every corner of the market.