Job Description

Data Protection Officer

Department: GDPR

Employment Type: Permanent - Full Time

Location: City, London

Compensation: £60,000 - £70,000 / year

Our growing Risk Advisory team provides specialist expertise across Data Protection, Cyber Security, and AI risk to organisations worldwide. As trusted advisers to commercial and not for profit organisations, we are passionate about helping our clients achieve their ambitions while navigating complex regulatory and operational challenges.

We work in close partnership with our clients, offering direct access to a dedicated expert management team. This enables us to deliver proactive, practical advice and responsive support on matters relating to data privacy, cyber security, and operational resilience. Our services span core areas of data protection and cyber security, alongside certification and accreditation support including ISO 27001, SOC 2, and Cyber Essentials.

We are now looking for an experienced Data Protection Officer to manage a portfolio of clients, delivering expert advice and tailored solutions to support compliance with data protection legislation. You will also contribute to bespoke advisory projects and support organisations to implement best practice in a way that is proportionate, pragmatic, and aligned to their business objectives.

This role offers the opportunity to join a forward‑thinking and collaborative team, providing outsourced Data Protection Officer support to clients across a wide range of sectors. With clients based across four continents, you will gain exposure to international data protection considerations and varied organisational contexts. Several members of our DPO team are former Information Commissioner’s Office (ICO) professionals, strengthening our ability to support clients effectively, including in their engagement with the ICO, and enabling us to deliver consistently high‑quality, trusted advice.

Key Responsibilities

• Build and maintain strong client relationships across various sectors.
• Provide expert guidance on UK GDPR, the Data Protection Act 2018, PECR, and relevant international data protection laws.
• Draft and implement data protection policies and procedures, ensuring they are effectively embedded within client organisations.
• Assist clients with data strategies and Records of Processing Activities (RoPAs)
• Conduct Data Protection Impact Assessments (DPIAs) and advise on risk mitigation.
• Design and deliver data protection training programs, both general and tailored to specific client needs.
• Support clients in handling personal data breaches and data subject rights requests.
• Perform audits and gap analyses, providing practical recommendations.
• Review supplier agreements and international data transfers
• Act as a point of contact for data protection authorities and oversee ongoing compliance monitoring.
• Lead and deliver standalone compliance projects to support client needs.
• Assist in the client onboarding process and contribute to the development of internal resources.

Skills, Knowledge and Expertise

• Experience as a Data Protection Officer (DPO).
• Strong knowledge of UK GDPR, Data Protection Act 2018, PECR, and international privacy laws.
• A recognised data protection qualification (e.g., CIPP/E, CIPM, or equivalent).
• Excellent client management, communication, and presentation skills.
• Ability to analyse complex data issues and provide clear, practical advice.
• Ability to work independently and as part of a team, managing multiple projects simultaneously.
• Strong time management skills, with the ability to handle multiple deadlines.
• Experience with CRM systems and project management tools (e.g., Trello, Jira) is desirable.
• Ability to work remotely and commit to continuous professional learning and development.
• Proficient in Microsoft Office Suite (Word, Excel, PowerPoint).

Benefits