Compliance Officer - FTC

The Role

We’re looking for an experienced Data Protection Compliance Officer to join our Legal & Compliance team and become a trusted business advisor within our dynamic Data Protection function.

Reporting directly to the Group Data Protection Officer, you’ll play a key role in supporting NEXT’s global commitment to protecting personal data and upholding individuals’ privacy rights.

This is a varied and hands-on role, combining day-to-day data protection operations with advisory responsibilities. You’ll work closely with colleagues across the business, providing practical advice on privacy and data protection matters, helping to strengthen our compliance framework and supporting a strong culture of data protection.

If you enjoy working in a fast-paced environment, are confident in navigating complex regulatory requirements and can turn legislation into practical, business-focused advice, we’d love to hear from you.

The role is offered on an initial Fixed Term Contract

What You Will Be Doing

Supporting data subject rights

• Oversee data subject rights processes across the NEXT Group, ensuring requests are handled efficiently and in line with legal requirements.

• Manage and redact employee Subject Access Requests (SARs).

• Identify opportunities to improve and streamline data subject rights processes.

• Manage privacy rights workflows using tools such as OneTrust or similar platforms.

Building a strong data protection culture

• Support the Group Data Protection Officer in developing and delivering data protection awareness initiatives.

• Help colleagues understand their data protection responsibilities and promote best practice across the business.

Providing advice and operational support

• Provide practical advice on data protection legislation, including the UK GDPR, DPA 2018 and PECR.

• Act as a key point of contact for internal and external stakeholders on data protection matters.

• Support customer-facing teams with data subject rights and data protection complaints.

• Manage the Data Protection inbox and respond to day-to-day business queries.

• Help ensure regulatory requirements are understood and effectively managed within the compliance framework.

Managing data protection incidents

• Respond to and escalate data protection incidents and breaches where appropriate.

• Investigate incidents, assess potential impact and support corrective actions through to resolution.

• Work closely with relevant stakeholders to ensure incidents are appropriately managed and closed.

What You Will Bring

We’re looking for someone who combines strong technical knowledge with a practical, business-focused approach to compliance.

You’ll have:

• Knowledge of relevant data protection legislation, particularly the UK GDPR, DPA 2018 and PECR.

• Experience working in a data protection, privacy, legal or compliance environment.

• The ability to work effectively in a fast-paced, challenging and constantly changing environment.

• A practical approach to compliance, with the ability to tailor your advice to different audiences and business situations.

• Excellent written and verbal communication skills, with the confidence to explain complex data protection issues clearly to non-specialists.

• Strong organisational skills, with the ability to plan and prioritise your workload while working to tight deadlines.

• Strong analytical, problem-solving and strategic thinking skills.

• The ability to build effective relationships with stakeholders and influence positive change.

• The confidence to constructively challenge and question approaches where necessary to ensure compliance requirements are met.

• High ethical standards and excellent attention to detail.

Experience in a similar data protection or privacy-related role is desirable.

#LI-DC1

#LI-Hybrid