Job Search

We are seeking an experienced Data Protection Officer to lead and coordinate data protection, privacy, and information governance activities across the organisation. The successful candidate will provide independent advice on compliance with applicable data protection legislation, regulatory guidance, and internal policies, while promoting a strong culture of privacy and responsible information handling. This role will act as a key point of contact for employees, customers, suppliers, regulators, and other relevant stakeholders on data protection matters.

Responsibilities will include monitoring compliance with privacy laws and organisational policies; maintaining and reviewing records of processing activities; advising on data protection impact assessments, legitimate interest assessments, data-sharing arrangements, and international transfers; and supporting the development of privacy notices, policies, procedures, and training materials. You will oversee the management of individual rights requests, including access, rectification, erasure, restriction, portability, and objection, ensuring that responses are accurate, timely, and properly documented. The role will also support the identification, investigation, and reporting of personal data breaches, coordinating remedial actions and lessons learned where required.

Applicants should have proven experience in a data protection, privacy, compliance, legal, or information governance role, together with strong knowledge of relevant data protection legislation and regulatory expectations. A recognised privacy qualification or professional certification is desirable. You will be confident interpreting complex requirements, assessing risk, and communicating practical recommendations to colleagues at all levels. Excellent written and verbal communication skills, sound judgement, discretion, and strong organisational abilities are essential. Experience developing training, conducting audits, managing stakeholder relationships, and embedding privacy by design principles will be highly valued. The successful candidate will be proactive, detail-oriented, and able to work independently while collaborating effectively across multidisciplinary teams.

We are seeking an experienced Data Protection Officer to provide expert data protection advice and support across a group of schools and trusts. This is a key role responsible for promoting a strong culture of privacy, accountability and information security, while ensuring that personal data is handled lawfully, fairly and transparently. You will act as a trusted adviser to senior leaders, governors, staff and other stakeholders, helping them understand and meet their responsibilities under UK data protection legislation.

Your responsibilities will include monitoring compliance with the UK GDPR, the Data Protection Act 2018 and related guidance; maintaining records of processing activities; reviewing privacy notices, policies, procedures and data-sharing agreements; and advising on data protection impact assessments. You will manage and investigate data breaches, coordinate responses to data subject rights requests, support the delivery of staff training and awareness programmes, and provide clear, practical guidance on issues including children’s data, safeguarding, photographs, educational technology and information sharing. You will also contribute to audits, risk assessments and continuous improvement activity, ensuring that actions are documented, tracked and completed.

The successful candidate will have substantial experience in a data protection, compliance or information governance role, ideally within education, the public sector or another complex multi-site environment. You should have a strong working knowledge of UK data protection law and the ability to interpret regulatory requirements in a practical and proportionate way. Excellent communication, organisation and problem-solving skills are essential, together with the confidence to challenge constructively and build effective relationships at all levels. Professional data protection or information governance qualifications, such as CIPP/E, CIPT, BCS or equivalent, would be desirable. The role may involve travel between sites and requires a high level of discretion, integrity and commitment to protecting the rights and wellbeing of children, young people and staff.

We are seeking a Data Protection Expert to provide specialist advice and practical support on privacy, data governance and information security matters. The successful candidate will help ensure that personal data is processed lawfully, fairly and transparently, while supporting the organisation’s operational and strategic objectives. You will work with stakeholders across the business to promote strong data protection practices and embed privacy considerations into policies, processes, products and services.

Your responsibilities will include monitoring compliance with applicable data protection legislation and regulatory guidance; maintaining and reviewing records of processing activities; advising on data protection impact assessments, legitimate interest assessments and international data transfers; and supporting the management of data subject rights requests, personal data breaches and related investigations. You will develop and deliver training and awareness initiatives, contribute to internal policies and procedures, and provide clear, practical guidance on data sharing, retention, confidentiality and privacy by design. You will also assist with audits, risk assessments, supplier due diligence and reporting to senior stakeholders, ensuring that emerging privacy risks are identified and addressed promptly.

Applicants should have substantial experience in a data protection, privacy, compliance or information governance role, with a strong understanding of relevant data protection principles and regulatory requirements. A recognised privacy or data protection qualification is desirable, as is experience working with information security frameworks, contract reviews and third-party risk management. You will be confident interpreting complex requirements and translating them into proportionate, business-focused solutions. Excellent written and verbal communication skills are essential, together with strong attention to detail, sound judgement and the ability to manage multiple priorities. Experience of working collaboratively with legal, technology, security, procurement and operational teams will be highly valued. This role offers the opportunity to influence organisational standards, strengthen privacy culture and support responsible use of data in a changing regulatory environment.

We are seeking an experienced Information Management and Data Protection Manager to lead the development, implementation and continuous improvement of information governance, records management and data protection practices. This role will provide expert advice to colleagues and senior stakeholders, ensuring that information is managed securely, lawfully and efficiently throughout its lifecycle. You will help promote a culture of accountability, transparency and good data stewardship across the organisation.

Key responsibilities will include maintaining and reviewing information governance policies, procedures and retention schedules; overseeing compliance with applicable data protection and freedom of information legislation; coordinating responses to data subject rights requests, information requests, data breaches and related investigations; and providing practical guidance on data sharing, privacy impact assessments, records management and information security. You will also monitor compliance, prepare reports for governance forums, support audits and risk assessments, and contribute to training and awareness programmes. The postholder will work closely with technology, legal, assurance and operational teams to identify risks, implement controls and improve information management systems and processes.

Applicants should have substantial experience in information governance, data protection, records management or a closely related field, together with a strong understanding of relevant legislation, regulatory guidance and best practice. A recognised professional qualification or relevant degree is desirable, as is experience of managing complex information risks, advising at a senior level and delivering organisation-wide change. You will need excellent analytical, communication and stakeholder-management skills, with the ability to explain complex requirements clearly to varied audiences. Strong organisational skills, sound judgement, attention to detail and the ability to handle confidential information with discretion are essential. This is an opportunity to make a significant contribution to effective, compliant and secure information management while supporting continuous improvement across a complex environment.

We are seeking a DLP Security Specialist to help protect sensitive information across endpoints, networks, cloud services and corporate applications. The successful candidate will be responsible for the design, implementation, monitoring and continual improvement of data loss prevention controls, ensuring that confidential, personal and regulated data is handled securely and in line with internal policies and applicable regulatory requirements.

Key responsibilities include developing and maintaining DLP policies, rules and detection mechanisms; investigating and responding to data protection alerts; tuning controls to minimise false positives; and carrying out detailed analysis of incidents involving unauthorised access, transmission, copying or disclosure of information. You will work closely with security operations, infrastructure, identity, legal, compliance and business teams to assess risks, coordinate remediation and support investigations. The role will also involve monitoring data flows, reviewing DLP events and reports, contributing to security incident response, documenting procedures and preparing management information on trends, risks and control effectiveness. You may also support data classification initiatives, security awareness activities, control testing and the secure onboarding of new technologies.

Applicants should have proven experience in data loss prevention, information security or a closely related field, with practical knowledge of DLP technologies and security monitoring platforms. You will be comfortable working with endpoint, email, web, network and cloud data protection controls, and have an understanding of data classification, encryption, access management, incident response and information governance. Strong analytical and problem-solving skills are essential, along with the ability to interpret technical events, identify root causes and communicate findings clearly to both technical and non-technical audiences. Experience with scripting, automation, security frameworks and relevant privacy or security standards would be advantageous. Professional certifications in information security, privacy or risk management are desirable.

We are seeking a Senior Data Protection Manager, M&A to lead privacy and data protection activities across mergers, acquisitions, divestments, and other strategic transactions. You will provide expert guidance throughout the transaction lifecycle, from initial due diligence and risk assessment through integration, separation, and post-de transaction remediation. Working with legal, information security, technology, HR, procurement, and business teams, you will identify privacy risks, define practical controls, and ensure data protection requirements are embedded into transaction planning and execution.

Your responsibilities will include assessing target and business-unit data environments, processing activities, policies, contracts, records of processing, international data transfers, retention practices, and incident histories. You will develop clear findings and recommendations for senior stakeholders, support privacy impact assessments, review transaction and integration documentation, and establish action plans with measurable milestones. You will also advise on data migration, systems consolidation, employee and customer communications, vendor arrangements, regulatory notifications, and the lawful handling of personal data during transitional service periods. Where appropriate, you will coordinate external advisers and ensure consistent governance across multiple jurisdictions.

The successful candidate will have significant experience in data protection, privacy compliance, or information governance, ideally within M&A, transformation, consulting, or a complex international organisation. Strong knowledge of applicable privacy laws and regulatory expectations is essential, together with the ability to interpret complex issues and translate them into commercially practical advice. Experience conducting privacy due diligence, managing remediation programmes, and working with cross-functional teams is highly desirable. You will be an assured communicator and relationship builder, capable of influencing senior stakeholders, managing competing priorities, and operating effectively in fast-changing environments. Professional privacy qualifications or relevant legal, risk, audit, or information security credentials would be advantageous.

We are seeking a Senior Data Protection Specialist to provide expert guidance on privacy, data protection and information governance across a complex organisation. The successful candidate will advise stakeholders on the lawful, fair and transparent use of personal data, helping to embed effective privacy practices into business operations, projects, products and services. This role will work closely with legal, information security, technology, compliance and operational teams to identify risks and develop practical, proportionate solutions.

Key responsibilities will include providing advice on data protection legislation and regulatory requirements; conducting and reviewing Data Protection Impact Assessments, legitimate interest assessments and transfer assessments; maintaining records of processing activities; supporting the management of data subject rights requests, personal data breaches and regulatory correspondence; and contributing to privacy policies, standards, procedures and training materials. You will also monitor changes in legislation, guidance and industry practice, assess their potential impact and help ensure that appropriate controls are implemented. The role may involve leading privacy reviews, undertaking audits and assurance activities, managing actions and reporting key risks and performance indicators to senior stakeholders.

Applicants should have substantial experience in a data protection, privacy, compliance or information governance role, ideally within a large or regulated environment. A strong working knowledge of applicable data protection legislation, privacy principles, records management and information security is essential, along with experience applying these requirements in practical business settings. A relevant professional qualification or membership of a recognised privacy or compliance body would be advantageous. You will need excellent analytical, communication and influencing skills, sound judgement, strong attention to detail and the ability to explain complex issues clearly to both technical and non-technical audiences. The successful candidate will be organised, proactive and confident working independently while collaborating effectively with colleagues at all levels.

We are seeking a Data Protection Engineer to help design, implement and maintain secure, resilient solutions that protect personal and sensitive information across enterprise systems. You will work closely with information security, infrastructure, software engineering, legal and compliance teams to translate data protection principles into practical technical controls. The role will contribute to the development of privacy-enhancing technologies, secure data flows and effective governance processes throughout the information lifecycle.

Your responsibilities will include assessing systems and processing activities for privacy and security risks; implementing encryption, pseudonymisation, tokenisation, access controls and data loss prevention measures; and supporting the secure design of applications, platforms and integrations. You will develop and maintain technical standards, policies and procedures relating to data protection, retention, deletion and secure data handling. You will also monitor control effectiveness, investigate potential data incidents, support impact assessments and audits, and help coordinate remediation activities. Clear documentation, accurate reporting and the ability to explain technical risks to non-technical stakeholders will be essential.

Applicants should have professional experience in data protection engineering, information security, privacy technology, cloud security or a closely related discipline. Strong knowledge of security architecture, identity and access management, encryption, vulnerability management and data governance is required. Experience with cloud platforms, security monitoring tools, automated compliance controls, databases and scripting languages such as Python, PowerShell or Bash would be advantageous. Familiarity with privacy and data protection legislation, recognised security frameworks and secure software development practices is also desirable. You should be analytical, collaborative and comfortable managing multiple priorities in a changing environment. Relevant qualifications in cybersecurity, information technology, data privacy or engineering, together with industry certifications, would be welcomed.

We are seeking a DLP Security Specialist to help protect sensitive information across corporate systems, cloud services, endpoints, and communication channels. In this role, you will design, implement, and maintain Data Loss Prevention controls that reduce the risk of unauthorised access, disclosure, or exfiltration of confidential data. You will work closely with information security, infrastructure, compliance, legal, and business teams to understand data flows, assess risks, and develop practical security measures that support business operations.

Your responsibilities will include configuring and tuning DLP policies, monitoring alerts and events, investigating suspected data handling violations, and coordinating appropriate remediation activities. You will classify sensitive data, define detection rules and control thresholds, manage exceptions, and help improve the accuracy of alerts by reducing false positives. The role will also involve supporting incident response investigations, documenting findings, producing management reports, and maintaining clear records for audit and regulatory purposes. You will contribute to data protection assessments, control testing, security awareness activities, and the ongoing improvement of information security procedures.

The successful candidate will have practical experience with DLP technologies and a strong understanding of data protection principles, information classification, identity and access management, endpoint security, and cloud environments. Familiarity with tools such as Microsoft Purview, Symantec, Forcepoint, Digital Guardian, or comparable platforms is advantageous. You should be comfortable analysing security events, interpreting technical logs, and communicating complex issues clearly to both technical and non-technical audiences. Experience with incident management, regulatory requirements, and security frameworks such as ISO 27001 or NIST will be valued. Strong attention to detail, sound judgement, discretion, and a proactive approach are essential for success in this position.

We are seeking an experienced Data Protection Manager to lead and develop the organisation’s data protection and privacy framework. This role will provide expert advice on the lawful, fair and transparent use of personal data, helping teams understand and meet their responsibilities under applicable data protection legislation. You will act as a trusted point of contact for colleagues, senior leaders, customers and external stakeholders on privacy-related matters.

Key responsibilities will include maintaining policies, procedures, records of processing activities and data retention schedules; advising on data protection impact assessments, legitimate interest assessments and privacy notices; and supporting the management of individual rights requests within required timescales. You will monitor compliance, identify areas of risk and recommend practical improvements. The role will also coordinate responses to personal data breaches, oversee investigations, support regulatory reporting where necessary and maintain accurate records of actions and outcomes. You will contribute to audits, assurance reviews and privacy-related projects, including the assessment of new systems, suppliers and data-sharing arrangements.

The successful candidate will have substantial experience in a data protection, information governance, privacy or compliance role, with a strong understanding of relevant legislation and regulatory guidance. A recognised privacy or data protection qualification is desirable, as is experience working with information security, procurement, legal or technology teams. You will be confident interpreting complex requirements and communicating them clearly to both technical and non-technical audiences. Strong organisational skills, sound judgement, attention to detail and the ability to manage competing priorities are essential. We are looking for someone who can work independently, build effective relationships and promote a positive culture of accountability, confidentiality and responsible data use.