Head of Data Compliance

Roke; England; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

DV clearance bonus

Performance-related bonus scheme

Contributory pension plan

30 days of annual leave

Flexible benefits platform

Flexible benefits

Job summary

A leading technology firm in Gloucestershire is seeking a Head of Data Compliance. This senior role involves leading GDPR compliance and overseeing all data protection matters. You will collaborate closely with teams across the company to ensure proper data governance and compliance with data legislation. Skills in leadership, communication, and risk management are essential. The position offers a full-time contract with benefits like a pension plan and performance-based bonuses.

Qualifications

• Proven leadership experience in data protection.
• Ability to influence senior management.
• Strong written and verbal communication skills.

Responsibilities

• Lead data protection compliance initiatives.
• Develop and implement strategies for data policy.
• Act as primary contact for data privacy matters.
• Define KPIs for data protection compliance and plan internal audits.
• Collaborate with Security on data security measures and cyber risk awareness.
• Deliver training on data compliance principles to new employees.

Skills

Leadership in data protection and privacy

Influencing senior stakeholders

Interpersonal and communication skills

Risk management and documentation

Education

Relevant degree (Law/IT/Privacy)

Tools

Data Protection Impact Assessments

Privacy by Design principles

ISO standards

Job description

Head of Data Compliance

Roke, Gloucestershire, England, United Kingdom

This is a senior role where you will take the lead on all data protection, GDPR compliance and wider data compliance issues, as well as data risk matters. The role has arisen due to the incumbent retiring from the Company. You will report directly to the General Counsel.

We welcome applications from those who come from a different industry to ours and from both public or private sector organisations; we understand that diversity of thought brings its own benefits to Roke and a fresh perspective on how we do things. This role may be a level transfer from someone who wishes to take on a new challenge or a promotion for someone who wishes to progress to the next level in their career.

Lastly, we understand that different people have different skills and experiences and therefore you might not be able to meet every responsibility or have the necessary experience listed below. However, we appreciate that you will bring other skills and experiences to us and would therefore encourage you to apply. You have nothing to lose!

Key Responsibilities

• Proven leadership experience in data protection and privacy
• Ability to influence senior stakeholders and communicate effectively at all levels
• Exceptional interpersonal skills and being able to build relationships both within the team and with stakeholders across the Company including Engineers, Project Managers, Finance, HR, Supply and Commercial teams.
• Strong written and verbal communication skills; the ability to write and articulate issues and risks clearly and succinctly and relay these verbally.

Governance & Compliance

• Act as the primary point of contact for data privacy matters across the business.
• Develop and implement strategies, policies and controls to ensure compliance with data protection legislation.
• Maintain statutory records, including Records of Processing Activities and Legitimate Interest Assessments.
• Respond to Data Subject Access Requests.
• Monitor regulatory developments and update internal policies accordingly.

Data Management & Documentation

• Ensure Privacy by Design principles are embedded in projects, including assisting with the preparing of Data Protection Impact Assessments (DPIAs).
• Lead investigations into suspected or actual data breaches, ensuring timely assessments, containment, documentation, root cause analysis and making recommendations to General Counsel on appropriate actions.
• Collaborate with the Security Team on information security to ensure robust data security measures.

Contracts & Third-Party Oversight

• Review of data protection clauses in contracts, Data Processing Agreements and Standard Contractual Clauses.
• Work with the Supply and Commercial Teams to ensure compliance with data protection requirements.
• Deliver training on data compliance principles to all new employees. Develop and deliver training programs to embed data protection awareness across the company.

Monitoring & Reporting

• Define and track KPIs for data protection compliance.
• Plan and execute regular internal audits to identify and mitigate risks proactively.
• Assist General Counsel in engaging with relevant regulatory bodies including with the ICO when necessary.

Emerging Technologies & AI Governance

• Working knowledge of utilising artificial intelligence within a technology business, measuring the associated risks and experience in leveraging its potential use as an enabler when used responsibly.
• Cyber Security
• Knowledge of cyber security principles and practices
• Knowledge and awareness of ISO standards, and/or any other standards relating to data/cyber security (NIST, Cyber Essentials).

Desirable (no matter if you can’t meet these!)

• Experience in working in a Technology business.
• Experience in working in a National Security setting.
• Experience in working in Defence

What we can offer

• DV clearance bonus (if applicable)
• Performance-related bonus scheme
• Contributory pension plan
• Sharesave Scheme
• 30 days of annual leave with the option to purchase an additional 5 days.
• Flexible benefits platform packed with lifestyle discounts

And we can also offer

• Learning & Development - We offer lots of opportunities for learning, whether you join us for a short stint or the long game, you’re good to grow with us. Including fully funded professional qualifications, leadership development and mentoring.
• Diversity and belonging - Everyone is welcome at Roke. We want you to feel confident and valued for who you are and to truly belong.
• Pace and variety - Our work is fast paced with lots of variety, you’ll build a diverse skill set and learn a lot in a fast moving business!

Clearances

Due to the nature of this role, we require you to be eligible to achieve SC clearance. As a result, you should be a British Citizen and have resided in the United Kingdom for the last 5 years.

The Next Step

Click apply, submitting an up-to-date CV setting out how you meet the above criteria – there is no need for a cover letter but you may send one if you wish!

If you would like to discuss this role in more detail please contact Shahzad Hamid via [e-mail]

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Legal

Industries

IT Services and IT Consulting

Referrals increase your chances of interviewing at Roke by 2x

Get notified about new Head of Compliance jobs in Gloucestershire, England, United Kingdom.