Data Protection & Compliance Leader (Hybrid UK)

Maintel; Blackburn; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Maintel is recruiting an experienced Data Protection & Compliance Officer to take ownership of our integrated compliance, governance and data protection framework. Reporting to the CFO, this role is broad and influential across the business with a focus on audit readiness and continual improvement.

You will lead DPO responsibilities, DPIAs, data subject rights, privacy notices and breach processes, while driving governance and risk reporting and supporting supplier and customer compliance

Qualifications

• Experience managing an Integrated Management System and maintaining multiple ISO certifications.

Responsibilities

• Act as Data Protection Officer (DPO) and provide expert guidance across UK GDPR, Data Protection Act 2018 and PECR.
• Lead and continually improve the Integrated Management System (IMS).
• Maintain multiple ISO certifications: ISO 9001, 14001, 45001, 22301, 27001, 27701 and 42001.
• Coordinate internal and external audits, certification activity and corrective actions.
• Manage compliance across Cyber Essentials, Cyber Essentials Plus, PCI-DSS and NHS-DSP.
• Oversee DPIAs, data subject rights, privacy governance, breach management and records of processing.
• Lead operational risk management and governance reporting.
• Support supplier assurance and customer compliance requirements.
• Produce compliance dashboards, KPIs and reporting for senior leadership.
• Support environmental and sustainability compliance including SECR, ESOS, CDP and Net Zero initiatives.
• Manage and develop one team member

Job description

Maintel is recruiting an experienced Data Protection & Compliance Officer to take ownership of our integrated compliance, governance and data protection framework. Reporting to the CFO, this role is broad and influential across the business with a focus on audit readiness and continual improvement.

You will lead DPO responsibilities, DPIAs, data subject rights, privacy notices and breach processes, while driving governance and risk reporting and supporting supplier and customer compliance