Data Officer / Data Protection Specialist

We are now looking for a Data Officer / Data Protection Specialist to join our growing and collaborative team. The primary focus of this role is to act as the main point of contact for clients, working closely within their businesses and alongside our wider team. You will support and promote the ethos and values of the company through contributions to our ISO Management Systems and initiatives such as BCorp, EcoVadis, and the Armed Forces Covenant.

This is a full-time permanent position, Monday to Friday (37.5 hours per week). We are open to considering school working hours or term-time only arrangements for the right candidate. The role involves a mix of office work and home working, with occasional visits to client sites across the UK.

Main Duties

  • Demystify data privacy laws in the UK and EU for clients and their teams.
  • Ensure clients comply with current legislation and regulations.
  • Communicate future regulatory changes to the wider team.
  • Conduct risk assessments (e.g., DPIAs, TRAs) and understand international data transfer mechanisms (e.g., SCCs, IDTAs).
  • Assist clients with managing data privacy incidents and provide support to internal teams (e.g., HR).
  • Conduct third-party analysis of data privacy compliance.
  • Coordinate and deliver IASME Governance and ISO 27701 Certifications.
  • Support the team in maintaining a compliant environment and identify areas for improvement.
  • Collaborate on developing training sessions and ‘give back’ opportunities as identified by leadership.
  • As we are a small business, provide assistance with other duties as required by the company.

Necessary Skills, Qualities and Experience

  • Ability to establish relationships with clients to understand their pain points, providing solutions to problems, fostering long-term relationships with them and becoming their trusted partner.
  • Superb interpersonal, communication and influencing skills.
  • First-rate organisational skills. The role will entail creating appropriate documentation e.g. minuting meetings, creating policies, supporting the development of training courses.
  • Excellent attention to detail, and the ability to plan and prioritise workloads.
  • Great IT skills, including proficiency in the Microsoft Office package and experience with data protection management software.
  • Ability to work independently using own initiative, and collaboratively as part of a team with cross-functional teams and departments.
  • A willingness to stay up-to-date with evolving data protection regulations and best practices, particularly GDPR and the UK Data Protection Act 2018.
  • Full driving licence and access to own car, or ability to travel to and from the office and client sites.
  • A basic knowledge of the technical infrastructure of organisations e.g. use of cloud services and other SaaS, is beneficial.

About Risk Evolves

We are an award-winning management consultancy passionate about effective governance, risk, and compliance within organisations of all sizes. Based in Leamington Spa since 2015, we focus on six main areas to help organisations develop and grow:

  • Risk Management
  • Environment, Social and Governance
  • Data Privacy
  • Information Security
  • Health and Safety
  • ISO Certifications

We are proud holders of the Armed Forces ERS award, meaning we offer interviews to Armed Forces service leavers to assist with their resettlement process.

a professional-looking person working at a computer | Data protection officer responsibilities

Location

Hybrid in Leamington Spa

Hours

37.5 per week, Monday – Friday

Salary

Circa £40,000

Benefits

  • Above statutory holiday entitlement
  • Flexible working options, including working from home and school hours
  • Pirkx Employee Benefits scheme
  • Certified B Corporation Company

How to Apply

Please forward your CV to helen_barge@riskevolves.com, including a cover letter explaining why you are the perfect candidate for this position. Applications without a cover letter will not be considered.

While we would like to contact all candidates, unfortunately, this is not always possible. If you haven’t heard from us within a week of your application, please assume it has not been successful.

We do not accept applications from recruitment agencies.

 

All candidates must have evidence of their right to work in the UK.

 

Previous applicants need not reapply.