Job Search

We are seeking an experienced Data Protection Officer to lead and coordinate data protection, privacy, and information governance activities across the organisation. The successful candidate will provide independent advice on compliance with applicable data protection legislation, regulatory requirements, and internal policies, while promoting a strong culture of privacy and responsible information handling. You will act as a key point of contact for employees, senior stakeholders, regulators, customers, and other external parties on data protection matters.

Your responsibilities will include maintaining and monitoring the data protection framework; advising on the lawful collection, use, sharing, retention, and disposal of personal data; and reviewing privacy notices, policies, procedures, contracts, and data processing arrangements. You will oversee data protection impact assessments, support records of processing activities, manage data subject rights requests, and coordinate responses to personal data breaches. The role will also involve delivering training and awareness programmes, carrying out compliance monitoring and audits, tracking remedial actions, and preparing clear reports and recommendations for senior management. You will work closely with legal, information security, technology, human resources, procurement, and operational teams to embed privacy by design and ensure effective risk management.

You will have substantial experience in a data protection, privacy, compliance, legal, or information governance role, with a strong working knowledge of relevant privacy legislation and regulatory guidance. A recognised professional qualification or certification in data protection, privacy, information governance, or a related discipline is desirable. You should be confident interpreting complex requirements, assessing risk, and communicating practical advice to audiences at all levels. Strong organisation, attention to detail, sound judgement, and the ability to manage sensitive information are essential. Experience handling data breaches, conducting impact assessments, developing policies, and delivering staff training would be highly valued. The role requires integrity, independence, discretion, and the ability to build effective relationships while constructively challenging non-compliant practices.