Data Protection & Risk Officer

About the role

We are looking for a passionate and dedicated Data Protection & Risk Officer to develop and implement our data protection strategy, ensure compliance with GDPR and related legislation, and act as the main point of contact with supervisory authorities.

Key responsibilities

• Develop and maintain data protection policies and procedures.
• Monitor compliance with GDPR, FOI and other relevant data protection laws.
• Oversee data processing activities to ensure legal compliance.
• Conduct Data Protection Impact Assessments (DPIAs) and audits, addressing any issues identified.
• Provide training and guidance to staff on data protection matters.
• Manage data protection incidents and breaches, ensuring timely reporting and resolution.
• Advise on privacy risks and mitigation strategies.
• Stay up‑to‑date with changes in data protection regulations.

Profile

• Experience in data protection and legal compliance.
• In‑depth knowledge of DPA18 and GDPR.
• Ability to perform audits and DPIAs according to prescribed procedures.
• Qualifications: GCSE Maths and English (grade 5 or above) or equivalent, Level 3 qualification or higher, evidence of ongoing professional development.
• Strong ability to devise, maintain and review processes within defined standards.
• Capable of working under pressure, maintaining confidentiality and communicating effectively.

Required skills

• GDPR compliance
• Data Protection Impact Assessments (DPIA)
• Data processing audit
• Incident management and breach reporting
• Policy development and implementation

What we offer

• Pension fund up to 27.1% per annum
• Regular training and development
• 30 days annual leave plus 8 bank holidays