Data Protection and Compliance Officer

Maintel; Blackburn; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Maintel is recruiting an experienced Data Protection & Compliance Officer to take ownership of our integrated compliance, governance and data protection framework. Reporting to the CFO, this role is broad and influential across the business with a focus on audit readiness and continual improvement.

You will lead DPO responsibilities, DPIAs, data subject rights, privacy notices and breach processes, while driving governance and risk reporting and supporting supplier and customer compliance

Qualifications

• Experience managing an Integrated Management System and maintaining multiple ISO certifications.

Responsibilities

• Act as Data Protection Officer (DPO) and provide expert guidance across UK GDPR, Data Protection Act 2018 and PECR.
• Lead and continually improve the Integrated Management System (IMS).
• Maintain multiple ISO certifications: ISO 9001, 14001, 45001, 22301, 27001, 27701 and 42001.
• Coordinate internal and external audits, certification activity and corrective actions.
• Manage compliance across Cyber Essentials, Cyber Essentials Plus, PCI-DSS and NHS-DSP.
• Oversee DPIAs, data subject rights, privacy governance, breach management and records of processing.
• Lead operational risk management and governance reporting.
• Support supplier assurance and customer compliance requirements.
• Produce compliance dashboards, KPIs and reporting for senior leadership.
• Support environmental and sustainability compliance including SECR, ESOS, CDP and Net Zero initiatives.
• Manage and develop one team member

Job description

Hybrid – London or Blackburn | 3 days per week in the office

We’re looking for an experienced Data Protection & Compliance Officer to join Maintel and take ownership of our integrated compliance, governance and data protection framework.

Reporting directly to the Chief Financial Officer, this is a broad and influential role for someone who enjoys working across the business, translating complex regulatory requirements into practical solutions and ensuring we remain audit-ready, compliant and continually improving.

What you’ll be responsible for:

• Acting as our Data Protection Officer (DPO) and providing expert guidance across UK GDPR, Data Protection Act 2018 and PECR
• Leading and continually improving our Integrated Management System (IMS)
• Maintaining multiple ISO certifications, including ISO 9001, 14001, 45001, 22301, 27001, 27701 and 42001
• Coordinating internal and external audits, certification activity and corrective actions
• Managing compliance across Cyber Essentials, Cyber Essentials Plus, PCI-DSS and NHS-DSP
• Overseeing DPIAs, data subject rights, privacy governance, breach management and records of processing
• Leading operational risk management and governance reporting
• Supporting supplier assurance and customer compliance requirements
• Producing compliance dashboards, KPIs and reporting for senior leadership
• Supporting environmental and sustainability compliance, including SECR, ESOS, CDP and Net Zero initiatives
• Managing and developing one team member

What we’re looking for:

You’ll have strong experience managing an Integrated Management System and maintaining multiple ISO certifications, alongside hands‑on experience of audit, governance, risk and regulatory compliance.

Crucially, you’ll also bring strong data protection governance experience, including DPO responsibilities, DPIAs, data subject rights, privacy notices, records of processing activities and personal data breach processes.

An ISO Internal Auditor or Lead Auditor qualification and a Data Protection Practitioner/DPO qualification would be advantageous.

This is a great opportunity for someone who wants genuine ownership of a varied compliance function and the opportunity to work closely with senior stakeholders across the organisation.

Interested?