Data Protection Officer

Job Purpose:
Are you passionate about data privacy, governance and helping organisations navigate an increasingly complex regulatory landscape?
As the Data Protection Officer (DPO), you will lead the Group's data protection and privacy compliance programme, ensuring that data privacy remains embedded in our culture, processes and decision-making. Acting as the subject matter expert, you'll provide strategic guidance, oversee compliance activities and work closely with stakeholders across the business to manage privacy risks and maintain the highest standards of data protection.
This is a highly visible role with regular interaction with senior leaders, regulators and key business functions, offering the opportunity to shape and influence the Group's privacy strategy and compliance framework.
For candidates with a legal qualification, the role may also include supporting the Legal team with commercial contract drafting, negotiation and advisory work. While the primary focus will remain on Data Protection Officer responsibilities, this provides an excellent opportunity to combine specialist privacy expertise with broader commercial legal experience.

Data Protection Officer (Primary Focus)

Lead and oversee the Group's data protection and privacy compliance programme, ensuring adherence to GDPR and other relevant data protection laws.
Provide expert advice to stakeholders on data privacy obligations, risks and regulatory requirements.
Monitor compliance through audits, assurance activities, policy reviews and data protection impact assessments.
Manage data incidents, breaches and data subject requests, acting as the key liaison with regulators and supervisory authorities.
Deliver training and awareness programmes to foster a strong data privacy culture across the business.
Provide regular updates and insights to senior leadership, the Executive Committee and Board committees.
Lead and develop the Data Protection Analyst.

Commercial Legal Support (where applicable)

Draft, review and negotiate a range of commercial agreements.
Provide practical legal advice on commercial, compliance and data protection matters.
Support stakeholders with contract negotiations, risk assessment and regulatory considerations.

Qualifications, Skills & Experience

Significant experience in data protection, privacy, compliance, information security, legal or audit environments.
Expert knowledge of UK GDPR, data protection legislation and privacy best practices.
Experience managing data subject requests, privacy incidents, breaches and regulatory engagement.
Strong understanding of information security, cyber risks and related compliance frameworks.
Qualified solicitor (with several years PQE) desirable but not essential for candidates undertaking the legal aspects of the role.
Strong risk assessment, problem-solving and decision-making capabilities.
Excellent stakeholder management and communication skills, including experience working with senior leaders and regulators.
Highly organised, commercially minded and able to work independently with integrity and discretion.
Experience within a regulated industry, such as gambling, financial services or similar, would be advantageous.