Compliance Officer – GDPR & ISO Specialist

About the role

We are seeking a proactive Compliance Officer to support GDPR, information governance and ISO‑based regulatory requirements for a growing organisation. Working remotely, you will collaborate with IT, HR and operational teams to ensure audit readiness and data protection compliance.

Key responsibilities

• Maintain RoPA records, DPIA and DSAR trackers, data‑sharing registers and breach logs.
• Manage ISO 27001 ISMS and ISO 9001 documentation, version control and audit trails.
• Coordinate NHS DSPT evidence, validate records and track gaps against toolkit assertions.
• Gather and organise evidence for internal and external audits, tracking findings to closure.
• Update risk registers, action logs and compliance dashboards for governance reporting.
• Monitor mandatory training, drive awareness activities and support supplier due‑diligence.
• Track emerging regulatory changes and update policies and procedures accordingly.

Required profile

• Proven experience in a compliance, information governance or audit support role.
• Familiarity with GDPR, ISO 27001, ISO 9001 and NHS DSPT requirements.
• Strong attention to detail and ability to work independently in a remote environment.

Required skills

• GDPR
• ISO 27001
• ISO 9001
• NHS DSPT
• Record of Processing Activities (RoPA)
• Data Protection Impact Assessment (DPIA)
• Data Subject Access Request (DSAR) tracking

What we offer

• Competitive salary £40,000‑£45,000 per year.
• Full‑time permanent contract.
• Remote working flexibility.