Data Protection Specialist

Amber Employment Services Ltd.; Addlestone; On-site; GBP 40,000 - 60,000; Full time

Job summary

Amber Employment Services Ltd. is recruiting a temporary Data Protection Specialist for a full-time 37-hour week assignment to 31 March 2027, with potential extension.

The role leads a privacy compliance programme and aims to deliver lasting improvements within an established organisation. Key tasks include developing a comprehensive ROPA, reviewing DPIAs, and ensuring data handling is reflected in contracts and learning materials.

Qualifications

• Strong working knowledge of UK GDPR and the Data Protection Act 2018.
• Experience developing ROPAs and completing DPIAs.
• Ability to explain complex privacy concepts clearly to colleagues.

Responsibilities

• Lead development of the Record of Processing Activities (ROPA).
• Gather information from departments to identify gaps and actions.
• Establish a practical process to keep the ROPA accurate and up to date.
• Review DPIAs and support new assessments where required.
• Review data protection clauses in existing contracts.
• Develop clear guidance, checklists and learning materials.
• Help colleagues understand responsibilities and apply requirements.

Skills

UK GDPR knowledge

DPIA & ROPA experience

Job description

Are you an experienced data protection professional who enjoys turning complex requirements into clear, practical ways of working? We're recruiting for a temporary Data Protection Specialist to lead a focused programme of privacy compliance improvements within an established organisation. Full-time, 37 hours per week: Assignment running to 31st March 2027, and potential for extension. This is an opportunity to take ownership of a substantial project, work closely with colleagues across different departments and leave behind processes that make a lasting difference.

The role

Your main priority will be to develop a comprehensive Record of Processing Activities (ROPA), giving the organisation a clear picture of how personal data is used, shared, retained and protected.

• Gather information from departments, identifying gaps, risks and actions needed.
• Establish a practical process for keeping the ROPA accurate and up to date.
• Review and update Data Protection Impact Assessments (DPIAs), supporting new assessments where required.
• Review data protection and data-sharing provisions in existing contracts.
• Develop clear guidance, screening checklists and learning materials.
• Help colleagues understand their responsibilities and make informed decisions about personal data.

About you

You'll bring strong working knowledge of UK GDPR and the Data Protection Act 2018, supported by practical experience of developing ROPAs and completing DPIAs.

You'll be confident working independently, asking the right questions and explaining requirements in a way that colleagues can understand and apply. Experience reviewing contractual data protection clauses would also be valuable.

We're looking for someone organised, approachable and pragmatic, with the judgement to prioritise what matters and the confidence to see improvements through.

Further details about the organisation will be shared with suitable candidates