Data Protection Specialist — Risk & Compliance Partner

SSE plc; United Kingdom; Hybrid; GBP 51,000 - 61,000; Full time

Benefits offered by this job

Private healthcare discounts

Gym membership discounts

Cycle to Work scheme

Maternity/adoption pay

Job summary

SSE plc is seeking a Data Protection Specialist to support the Distribution Data Protection team. The successful candidate will manage data protection obligations, provide advice to the business and lead DPIAs for high‑risk processing activities.

The role requires a GDPR Practitioner qualification, strong stakeholder management, and experience in a large, regulated environment. The position is a 12-month secondment/FTC with hybrid working options.

Qualifications

• Deep understanding of GDPR requirements and compliance in a large, data-heavy organisation.
• Experience ensuring data protection across a high-volume processing environment.
• Excellent stakeholder management, communication and negotiation skills to influence senior leadership.
• Experience of assessing risk and interpreting regulatory requirements to balance compliance with operations.
• Experience in the energy sector or highly regulated environments is preferred.

Responsibilities

• Ensure mandatory data protection requirements are met, including incident and breach management and data subject rights handling.
• Facilitate DPIAs for new or high-risk personal data processing activities.
• Represent Data Protection in steering groups and develop communications and training with business teams.
• Prepare monthly reports for Senior Leaders and analyse incident data to drive improvements.

Skills

Stakeholder management

Communication

Negotiation

Risk assessment

Regulatory awareness

Education

GDPR Practitioner qualification

Job description

SSE plc is seeking a Data Protection Specialist to support the Distribution Data Protection team. The successful candidate will manage data protection obligations, provide advice to the business and lead DPIAs for high‑risk processing activities.

The role requires a GDPR Practitioner qualification, strong stakeholder management, and experience in a large, regulated environment. The position is a 12-month secondment/FTC with hybrid working options.