Compliance Officer

Orion Group; Scotland; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A leading Oil & Gas Operator in Aberdeen is seeking a Data Compliance Officer for a contract position. This role involves developing compliance frameworks, conducting risk assessments, and ensuring adherence to regulations. The ideal candidate has substantial experience in compliance and data privacy within the oil and gas sector, alongside excellent leadership and communication skills. A competitive package and hybrid working conditions are offered.

Benefits

Hybrid working arrangement

Diversity and inclusion initiatives

Qualifications

• Proven experience in senior compliance and/or data privacy roles, preferably within the oil and gas industry.
• Strong understanding of global compliance and privacy standards (e.g., UK GDPR, DPA 2018).
• In-depth knowledge of enforcement regimes and regulatory expectations as related to corporate compliance programs.

Responsibilities

• Develop and maintain a risk-based compliance framework.
• Conduct ongoing compliance risk assessments.
• Monitor evolving regulations and update internal policies.
• Design and implement compliance training programs.
• Lead responses to regulatory inquiries and audits.

Skills

Compliance framework development

Risk assessment

Stakeholder engagement

Communication skills

Leadership

Education

Legal, finance, or compliance-related qualifications

Privacy certifications (CIPP/E, CIPM, ISEB)

Job description

Overview

Our Oil & Gas Operator client is currently recruiting for the position of Data Compliance Officer, based in Aberdeen. This will be a c14 month contract with a good liklihood of compliance. Candidates would have to be based in Aberdeen Hybvrid working 3/2 is available.

Key Responsibilities

• Develop and maintain a risk-based and robust compliance framework aligned with key risk areas including Anti-Bribery and Corruption (ABAC), Antitrust/Competition Law, Fraud, Conflicts of Interest, and Trade Compliance.
• Conduct ongoing compliance risk assessments and lead remediation efforts.
• Monitor evolving regulations and guide updates to internal policies.
• As a key element of the compliance framework, establish and implement risk-based third-party risk management procedures, including due diligence, monitoring, and relevant assurance processes.
• Design and implement company-wide compliance training programs, including the establishment of a risk-based nominations process, more tailored training for higher-risk roles, and periodic effectiveness assessments.
• Prepare and present compliance performance reports as well as continuous improvement plans and objectives to leadership on a periodic basis.
• Establish and maintain an Ethics and Compliance communications plan, including periodic leadership and staff internal communications and external communications to business partners where appropriate.
• Lead responses to regulatory inquiries, audits, and examinations.
• Triage reports of misconduct and lead or oversee investigations, including maintaining proper records on outcomes and remediation where applicable.
• Develop and maintain a comprehensive policy governance framework, ensuring periodic review, proper version control, and accessibility to relevant stakeholders.
• Coordinate a business-as-usual compliance monitoring and assurance program.
• Responsibility for implementing, managing and promoting internal reporting mechanisms together with management and other key roles.

Data Privacy Responsibilities

• Maintain a data privacy framework aligned with the ICO\'s Accountability Framework and other relevant standards.
• Lead containment, remediation, and timely regulatory engagement in the event of a data breach.
• Define and implement the organization\'s privacy strategy in alignment with legal requirements and internal data strategies.
• Provide specialist privacy and ethics advice; build relationships to embed privacy into operations.
• Act as the data privacy advisor at leadership forums and governance bodies.

Qualifications and Experience

• Proven experience in senior compliance and/or data privacy roles, preferably within industries such as oil and gas.
• Strong understanding of global compliance and privacy standards (e.g., UK GDPR, DPA 2018).
• In depth knowledge of enforcement regimes and regulatory expectations as related to corporate compliance programs, including but not limited to the FCPA, UK Bribery Act, OFAC sanctions, and other relevant international frameworks. Experience in implementing privacy programs, conducting risk assessments, and managing incidents.
• Excellent leadership, communication, and stakeholder engagement skills.
• Legal, finance or compliance-related qualifications preferred.
• Privacy certifications such as CIPP/E, CIPM, or ISEB Data Protection are highly desirable.
• Familiarity with frameworks such as ICO\'s Accountability Framework, NIST Privacy Framework, and ISO 27001 is beneficial.

Contract position

If you feel that you are well suited to the above opportunity and would like to find out more then please contact Orion Group for more information or apply by forwarding your current CV quoting reference: TR/079209.

Our role in supporting diversity and inclusion
As an international workforce business, we are committed to sourcing personnel that reflects the diversity and values of our client base but also that of Orion Group. We welcome the wide range of experiences and viewpoints that potential workers bring to our business and our clients, including those based on nationality, gender, culture, educational and professional backgrounds, race, ethnicity, sexual orientation, gender identity and expression, disability, and age differences, job classification and religion. In our inclusive workplace, regardless of your employment status as staff or contract, everyone is assured the right of equitable, fair and respectful treatment.