Data Governance Consultant

Pivotal is looking for a consultant with strong data governance experience in the UK Financial Services market. We are running a programme to migrate personal data records which sit across onboarding, transactional, AML/KYC, complaints and communications systems, governed by the Pivotal's Board-approved Data Protection Policy, Data Retention Schedule, DPIA Framework and ROPA Register, under UK GDPR, the Data Protection Act 2018 and FCA SYSC / Consumer Duty requirements.

The target platform where the data records will sit has not yet been selected; evaluating and recommending options for the data platform is part of this engagement and the consultant's scope, working alongside Pivotal senior stakeholders.

Technical migration and data engineering:

• Audit source systems, data quality, and volumes; produce source-to-target data mapping
• Recommend and help select the target central data platform and migration architecture
• Design and execute a phased extract-transform-load (ETL) migration plan, including reconciliation, validation and rollback procedures
• Manage cutover, go-live support and post-migration stabilisation
• Deliver the migration of 10 million+ records to a new central system of record, and to establish the controls required to keep that system compliant on an ongoing basis
• Engage the source provider's DPO (or equivalent) to agree the data migration approach, provide guidance on legal agreement, and put the required transfer controls in place
• Complete DPIA for target system and plan for residual risks
• Define testing requirement and access controls.

Data protection and compliance oversight:

• Review Pivotal's Data Protection Policy, Retention Schedule, DPIA Framework and ROPA Register, and make recommendations as required
• Confirm the migration's lawful basis, necessity and data minimisation
• Complete a Data Protection Impact Assessment (DPIA) for the migration using the Company's Annex A template, for DPO / Board sign-off prior to go-live
• Update ROPA entries and retention cross-mapping to reflect the new system and data flows
• Ensure access controls, encryption, audit logging and retention/deletion rules in the target system meet Company and regulatory standards

• Engagement to commence on appointment (expected early November 2026) for an initial period of 3 months. The duration of this engagement might extend beyond the initial 3-month period, either as an extension of the consulting agreement or as an appointment to a permanent position in Pivotal.
• Migration and control framework to be fully complete and signed off before February 2027.
• The consultant will have a dual reporting line:
  • Pivotal's Risk Director (in their capacity as Data Protection Lead)
  • Pivotal's Technology Transformation Director
• The consultant will deliver agreed deliverables, against set milestones, and ensure any residual high-risk findings escalated to Pivotal stakeholders (and ultimately to Pivotal's leadership) in line with the DPIA Framework.

Pivotal is the UK's leading mortgage and protection advice group. Backed by LSL and Pollen Street Capital, we've rapidly built a nationwide network of industry-leading specialist teams with over 1,000 talented people - together delivering annual revenues exceeding £100 million. Our scale is matched by our specialism. Pivotal's advisor teams cover every corner of the market - from mainstream residential to second charge, commercial, bridging, buy-to-let, landlord, protection, and home insurance.

Our brands include Embrace Financial Services, First2Protect, Lifetime Finance Group, Grange Mortgage & Protection Services, The Buy to Let Broker, The Loan Partnership, John Charcol, Believe Money, and many other specialist mortgage, lending, protection and insurance businesses across the UK, giving us unrivalled expertise across every corner of the market.