Group Data Protection Officer

YTL UK Group; Bath; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Pension contribution up to 20%

Career progression opportunities

Holiday allowance 25 days rising to 28

Sell up to five days of holiday

Buy up to ten days of holiday

Healthcare package

Life assurance 8x salary

Electric car salary sacrifice

Retail discounts

Volunteer day

Enhanced family leave and pay

Health & wellbeing platform access

Mental health support

£1,000 referral bonus

Job summary

YTL UK is seeking an experienced Data Protection Officer to join our Legal team and safeguard the personal data of customers, employees and partners across the Group.

This unique role has statutory independence within the organisation, reporting to leadership, and will drive privacy governance, DPIAs and regulatory engagement with the ICO while embedding a strong privacy culture across multiple UK businesses.

Qualifications

• Expert knowledge of national and European data protection laws and practices.
• Experience in a senior data protection, privacy, compliance or legal role, ideally in a regulated sector.
• Strong track record advising senior management and influencing organisational strategy.
• Experience handling regulator interactions, investigations, audits and remediation.
• Excellent communication and interpersonal skills, with the ability to translate complex requirements into practical advice.
• Ability to build strong relationships across legal, IT, HR, operations and other business areas.

Responsibilities

• Advising group leadership on data protection obligations, risks and best practice.
• Overseeing and maintaining privacy governance framework, policies and procedures.
• Conducting and reviewing Data Protection Impact Assessments (DPIAs) and other risk assessments.
• Monitoring compliance with data protection laws and internal policies through audits and regular reviews.
• Acting as the primary point of contact for the ICO and managing regulatory communications.
• Handling data subject rights requests, complaints and breaches, ensuring remediation and reporting.
• Providing support in respect of data protection provisions in external contracts.
• Advising on training and awareness programmes to strengthen our privacy culture.
• Leading or supporting incident response for personal data breaches.
• Advising on international transfers, supplier management and contractual requirements.
• Keeping up to date with regulatory developments and translating them into practical guidance.

Job description

We have an exciting opportunity for an experienced Data Protection Officer to join our Legal team and play a critical role in safeguarding the personal data of our customers, employees and partners.

This is a unique position within the Group, the only role in the organisation with statutory independence, and one that sits at the heart of our governance, compliance, and customer‑trust commitments.

One of the biggest projects in the wider YTL portfolio is the development of Filton airfield in Bristol. This involves the creation of a new neighbourhood from scratch, with a range of residential and commercial properties, as well as the construction of the Bristol arena in the old Brabazon hangar.

Our collaborative and professional team of in-house solicitors cover all legal matters, including water industry and regulatory issues, commercial arrangements, data protection issues and property-related matters.

What you'll do

As our Data Protection Officer, you'll ensure that the various companies within the Group comply with data protection laws, including the UK GDPR, Data Protection Act 2018 and the Privacy and Electronic Communications Directive 2003.

You'll advise senior leaders, monitor compliance, and act as the organisation's independent point of contact for the Information Commissioner's Office (ICO).

You'll work across the business supporting directors, senior managers and operational teams to embed strong privacy practices and ensure we meet our legal and ethical obligations.

This is a high‑profile role with significant responsibility, requiring expert judgement, independence, and the ability to influence at all levels.

Your key responsibilities will include:

• advising group leadership (including at Board level), senior management and staff on data protection obligations, risks and best practice
• overseeing and maintaining our privacy governance framework, policies and procedures
• conducting and reviewing Data Protection Impact Assessments (DPIAs) and other risk assessments
• monitoring compliance with data protection laws and internal policies through audits and regular reviews
• acting as the primary point of contact for the ICO and managing regulatory communications
• handling data subject rights requests, complaints and breaches, ensuring appropriate remediation and reporting
• providing support in respect of data protection provisions in external contracts
• advising on training and awareness programmes to strengthen our privacy culture
• leading or supporting incident response for personal data breaches
• advising on international transfers, supplier management and contractual requirements
• keeping up to date with regulatory developments and translating them into practical guidance.

What you'll need

We're looking for someone with:

• expert knowledge of national and European data protection laws and practices
• experience in a senior data protection, privacy, compliance or legal role, ideally in a regulated sector
• a strong track record of advising senior management and influencing organisational strategy
• experience handling regulator interactions, investigations, audits and remediation
• excellent communication and interpersonal skills, with the ability to translate complex requirements into practical advice
• the ability to build strong relationships across legal, IT, HR, operations and other business areas

What you'll receive

• A combined pension contribution of up to 20%.
• Career progression and professional development opportunities.
• 25 days' holiday rising to 28 with length of service.
• The opportunity to sell up to five days of holiday every year.
• The opportunity to buy up to ten days of holiday each year (subject to conditions).
• A healthcare package that allows you to claim back healthcare costs.
• Life assurance of up to eight times your salary.
• The opportunity to lease a new electric car through salary sacrifice (subject to conditions).
• Cashback and discounts from more than 3,000 retailers.
• One paid volunteering day each year.
• Enhanced family leave and pay arrangements.
• Access to an interactive health and wellbeing platform.
• Support from trained mental health first aiders.
• A £1,000 referral fee if you recommend someone who is successfully recruited by us.

Who we are

YTL UK is part of the international YTL Group based in Kuala Lumpur. The UK companies include:

• Wessex Water – one of the top-performing water and sewerage companies in England and Wales, serving 2.9 million people across the South West
• YTL Developments – a major UK developer currently redeveloping a 350-acre former airfield into an award‑winning, exciting mix of houses, apartments, schools, commercial space, restaurants and hotels, to make a truly sustainable new community
• YTL Construction UK – a top 20 UK contractor providing fully integrated services to infrastructure, residential, commercial, industry, energy and environmental sectors
• YTL Live – the development and operation of an entertainment complex that includes a 20,000 capacity arena, conferencing and exhibition space
• plus a number of other retail, environmental and specialist businesses.

Our people tell us that YTL UK is a great place to work, which is why so many of them stay with us! You will have a unique opportunity to develop and progress your career within such a diverse group.

We are passionate about diversity and inclusion – with that in mind, all applicants are welcome. We are delighted to have signed the Armed Forces Covenant and are a Disability Confident Employer.

If you require reasonable adjustments to be made during the recruitment process, please inform a member of our Recruitment team.