Job Search

We are seeking an experienced Data Protection Officer to lead and strengthen the organisation’s approach to data protection, privacy, and information governance. The successful candidate will provide independent advice on compliance with applicable data protection laws and regulations, monitor adherence to internal policies, and promote a culture of responsible information handling across the business. This role will work closely with colleagues at all levels, including senior leadership, legal, information security, technology, human resources, and operational teams.

Key responsibilities will include maintaining and reviewing data protection policies, procedures, records of processing activities, data retention schedules, and privacy notices. You will advise on data protection impact assessments, legitimate interest assessments, data-sharing arrangements, processor contracts, international data transfers, and the appropriate use of personal information in new projects and systems. The role will also oversee the management and investigation of personal data breaches, support responses to individual rights requests, coordinate regulatory communications where required, and provide clear, practical guidance on privacy risks and mitigating actions.

Applicants should have substantial experience in a data protection, privacy, compliance, or information governance role, together with a strong understanding of relevant legislation and regulatory guidance. A recognised professional qualification or certification in data protection is desirable. You will need excellent analytical, organisational, and communication skills, with the ability to explain complex requirements to both technical and non-technical audiences. The ideal candidate will be confident working independently, exercising sound judgement, managing competing priorities, and influencing stakeholders constructively. Experience developing and delivering staff training, conducting compliance reviews, and using risk-based approaches to improve privacy practices would be highly valued.

We are seeking a skilled Security Tester to assess the resilience of applications, systems, networks, and services against cyber threats. In this role, you will plan and conduct security testing activities, identify vulnerabilities, validate security controls, and provide clear recommendations to reduce risk. You will work closely with development, infrastructure, engineering, and risk teams to support secure delivery throughout the technology lifecycle.

Your responsibilities will include performing web application, API, mobile, network, cloud, and infrastructure penetration testing; conducting vulnerability assessments and configuration reviews; and evaluating systems against recognised security standards and testing methodologies. You will research emerging threats, develop appropriate test cases, safely exploit vulnerabilities where authorised, and document evidence in detailed technical reports. You will also present findings to technical and non-technical stakeholders, explain business impact, agree remediation priorities, and carry out follow-up testing to confirm that issues have been resolved.

The successful candidate will have practical experience in penetration testing, vulnerability assessment, or a closely related security testing discipline, together with a strong understanding of common vulnerabilities, authentication mechanisms, secure development principles, and network protocols. Familiarity with tools such as Burp Suite, Nmap, Metasploit, vulnerability scanners, scripting languages, and cloud security platforms is desirable. Relevant certifications such as CREST, OSCP, OSWE, CHECK, or equivalent experience would be advantageous. You should be analytical, methodical, and comfortable working independently while collaborating effectively with colleagues. Strong written and verbal communication skills are essential, as is the ability to manage competing priorities, maintain accurate records, and conduct all testing responsibly within agreed rules of engagement.