IMS Systems & Data Protection Lead

Maintel; Blackburn; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Maintel is seeking an experienced Data Protection & Compliance Officer to own the integrated compliance, governance and data protection framework. Reporting to the CFO, the role translates regulatory requirements into practical solutions and keeps us audit-ready and compliant.

Crucially, you’ll bring data protection governance experience, DPO responsibilities, DPIAs, privacy notices, records of processing and breach management, with ISO internal auditing advantages.

Qualifications

• Experience managing an Integrated Management System (IMS) and multiple ISO standards.
• Hands-on GDPR, DPO responsibilities, DPIAs and data subject rights.
• Audits, governance, risk and regulatory compliance experience.

Responsibilities

• Act as Data Protection Officer (DPO) and guide GDPR compliance.
• Lead and improve the Integrated Management System (IMS).
• Maintain ISO certifications: 9001, 14001, 45001, 22301, 27001, 27701, 42001.
• Coordinate internal/external audits and corrective actions.
• Manage Cyber Essentials, PCI-DSS and NHS-DSP compliance.
• Oversee DPIAs, data subject rights, privacy governance and breach response.
• Lead governance reporting and operational risk oversight.
• Support supplier and customer compliance requirements.
• Produce compliance dashboards and KPIs for leadership.

Skills

Data Protection

Integrated Management System

ISO Certification

Audit & Governance

DPIAs

Privacy Notices

Job description

Hybrid – London or Blackburn | 3 days per week in the office

We’re looking for an experienced Data Protection & Compliance Officer to join Maintel and take ownership of our integrated compliance, governance and data protection framework.

Reporting directly to the Chief Financial Officer, this is a broad and influential role for someone who enjoys working across the business, translating complex regulatory requirements into practical solutions and ensuring we remain audit-ready, compliant and continually improving.

What you’ll be responsible for:

• Acting as our Data Protection Officer (DPO) and providing expert guidance across UK GDPR, Data Protection Act 2018 and PECR
• Leading and continually improving our Integrated Management System (IMS)
• Maintaining multiple ISO certifications, including ISO 9001, 14001, 45001, 22301, 27001, 27701 and 42001
• Coordinating internal and external audits, certification activity and corrective actions
• Managing compliance across Cyber Essentials, Cyber Essentials Plus, PCI-DSS and NHS-DSP
• Overseeing DPIAs, data subject rights, privacy governance, breach management and records of processing
• Leading operational risk management and governance reporting
• Supporting supplier assurance and customer compliance requirements
• Producing compliance dashboards, KPIs and reporting for senior leadership
• Supporting environmental and sustainability compliance, including SECR, ESOS, CDP and Net Zero initiatives
• Managing and developing one team member

What we’re looking for:

You’ll have strong experience managing an Integrated Management System and maintaining multiple ISO certifications, alongside hands‑on experience of audit, governance, risk and regulatory compliance.

Crucially, you’ll also bring strong data protection governance experience, including DPO responsibilities, DPIAs, data subject rights, privacy notices, records of processing activities and personal data breach processes.

An ISO Internal Auditor or Lead Auditor qualification and a Data Protection Practitioner/DPO qualification would be advantageous.

This is a great opportunity for someone who wants genuine ownership of a varied compliance function and the opportunity to work closely with senior stakeholders across the organisation.

Interested?