Data Protection Officer

The Opportunity

We are looking for Data Protection Officer to join a market leading organisation located in the West Midlands, to take ownership of its data protection strategy, privacy governance and regulatory compliance.

This is an opportunity to play a key role in strengthening data protection practices across a complex business environment, ensuring personal information is managed responsibly while supporting ongoing operational and technology improvements.

My client are looking for someone who can bring structure, clarity and accountability to its data protection processes. You'll have the autonomy to review existing practices, identify improvements and work closely with stakeholders to embed a strong culture of privacy and compliance.

We're particularly interested in individuals who can balance regulatory expertise with a pragmatic, commercially aware approach to protecting personal data.

The Role

Working closely with Information Security, IT, HR, Legal and other business functions, you will oversee the organisation's approach to data protection and privacy compliance.

Responsibilities

• Developing, implementing and maintaining data protection policies, procedures and governance frameworks in line with UK GDPR, the Data Protection Act 2018 and PECR.
• Monitoring regulatory compliance, identifying potential risks and recommending appropriate improvements.
• Managing Data Subject Access Requests (DSARs) and other individual rights requests, ensuring accurate responses within statutory timescales.
• Leading Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments, embedding privacy by design into projects and business processes.
• Maintaining the Record of Processing Activities (RoPA) and supporting accurate data inventories.
• Managing personal data breaches, coordinating investigations and ensuring regulatory notifications are made where required.
• Reviewing data processing agreements, supplier contracts and international data transfer arrangements to assess privacy risks.
• Providing specialist guidance on the handling of customer, employee, supplier and marketing data.
• Working with stakeholders to improve data retention, classification and disposal practices.
• Developing and delivering data protection training and awareness programmes.
• Acting as a key point of contact for the Information Commissioner's Office (ICO), auditors and individuals exercising their data protection rights.
• Providing regular reports to senior leadership on compliance performance, privacy risks and areas requiring improvement.

About You

We're looking for a confident and knowledgeable data protection professional who enjoys taking ownership, improving processes and influencing positive change.

Experience:

• Proven experience in a Data Protection Officer, Data Protection Manager, Privacy Manager or similar privacy governance role.
• Strong working knowledge of UK GDPR, the Data Protection Act 2018 and relevant privacy regulations.
• Practical experience managing DSARs, DPIAs, personal data breaches and compliance activities.
• Experience developing or improving data protection policies, processes and governance frameworks.
• A sound understanding of Records of Processing Activities, data retention requirements and privacy risk assessments.
• Experience reviewing data processing agreements and managing third-party data protection risks.
• An understanding of how data privacy interacts with information security and modern IT environments.
• Strong analytical skills, with the ability to interpret regulatory requirements and translate them into practical business guidance.
• Excellent communication and stakeholder management skills, including the confidence to challenge senior colleagues constructively.
• A proactive, organised and solutions-focused approach, with the ability to work independently and manage competing priorities.

Professional qualifications such as CIPP/E, CIPM, BCS Data Protection or equivalent would be advantageous.

Why Consider This Opportunity?

• Ownership and influence: Take responsibility for developing and improving data protection governance across the organisation.
• Opportunity to make an impact: Review existing processes, identify improvements and help establish more effective privacy controls.
• Cross-functional exposure: Work closely with Information Security, IT, HR, Legal and senior business stakeholders.
• Varied responsibilities: Gain exposure to regulatory compliance, privacy risk management, supplier governance and business transformation.
• Professional development: Play an important role in shaping the organisation's approach to privacy and information governance.
• Hybrid working: Benefit from a combination of office-based collaboration and remote working.

If you have the experience, we are looking for and interested in finding out more please send your CV

At Gleeson Recruitment Group, we embrace inclusivity and welcome applicants of all backgrounds, experiences, and abilities. We are proud to be a disability confident employer.

By applying you will be registered as a candidate with Gleeson Recruitment Limited. Our Privacy Policy is available on our website and explains how we will use your data.