Data Protection Officer

LJ Recruitment; Easter Howgate; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A Scottish law firm is seeking a Data Protection Officer to provide data protection and privacy guidance. The role involves leading GDPR compliance initiatives, managing client relationships, and collaborating with internal teams. The ideal candidate has over 4 years of experience in data protection and holds relevant qualifications. This position offers a hybrid work model based in Glasgow or Edinburgh.

Qualifications

• 4+ years of experience in data protection, privacy, or information security.
• Proven track record of advising on GDPR compliance.

Responsibilities

• Advise clients on data protection and privacy.
• Lead GDPR compliance efforts including audits and training.
• Build strong client relationships and offer tailored advice.

Skills

Data protection compliance

GDPR knowledge

Client relationship management

Education

CIPM or equivalent qualification

Job description

Data Protection Officer

Location : Glasgow or Edinburgh (hybrid)

We're partnering with a respected Scottish law firm that’s genuinely built around people, not process. They've made their name by blending sharp legal minds with a practical, human approach, and their Data Protection team is a big part of that story.

They're now looking for a Data Protection Officer who's as comfortable untangling GDPR complexity as they are chatting with clients about real-world impact.

You’ll be the go-to expert for a range of organisations, acting as their outsourced DPO and helping them navigate privacy and compliance with confidence. It's a role with visibility, trust, and plenty of space to shape things your way.

What you’ll do

• Be the trusted advisor clients turn to for data protection and privacy guidance.
• Lead on all things GDPR, from data breaches and audits to policies and training.
• Build long‑term client relationships that feel more like partnerships than projects.
• Roll up your sleeves with colleagues in commercial, IT, and risk to deliver joined‑up advice.
• Share your knowledge through training sessions, webinars and the occasional thought piece.

What you’ll bring

• Around 4+ years in data protection, privacy, or information security.
• A data protection qualification such as CIPM or CI...