Interim Data Protection Officer - Hybrid

London Luton; Luton; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Competitive pension

Private healthcare

Free gym

Flexible working

Volunteering days

Discounted travel

Job summary

London Luton Airport Operations Limited (LLAOL) is recruiting an Interim Data Protection Officer to lead and shape the DPO function under a 12-month fixed-term contract. The role is based in a hybrid pattern with 4–5 days per week and on-site presence required for at least two days.

You will own compliance with UK GDPR, the Data Protection Act 2018 and PECR, advise staff, manage DSARs and DPIAs, and work with IT, legal and cybersecurity teams to embed privacy by design across the organisation.

Qualifications

• Strong knowledge of UK GDPR, Data Protection Act 2018, PECR and related privacy legislation.
• Demonstrable experience in a data protection, compliance, or information governance role.
• Excellent communication and interpersonal skills, with the ability to influence and educate staff at all levels.
• Strong analytical and problem-solving abilities, with attention to detail and a proactive approach.
• Ability to interpret complex legislation and translate requirements into practical policies and procedures.
• Experience in conducting audits, risk assessments, and handling data breaches.
• Relevant professional certification (e.g., CIPP/E, CIPM) is desirable.
• Sufficient knowledge of IT and data management systems to engage with technical teams.
• Strong change and project management skills, ability to manage time, prioritise effectively, and handle multiple deadlines.
• High standards of integrity, confidentiality, and ethical conduct.
• Experience in reviewing and advising on data sharing agreements, schedules and provisions
• Experience preparing reports and/or presenting to Audit and Risk Committee

Responsibilities

• Monitor compliance with data protection laws and internal policies, including regular audits and reviews.
• Advise and inform staff on their obligations under data protection legislation and best practice procedures, including setting standards to ensure compliance.
• Develop, implement, maintain and deliver data protection policies, procedures, and training programmes.
• Serve as the primary point of contact for data protection queries from the business and for the Information Commissioner’s Office (ICO).
• Manage and respond to Data Subject Access Requests (DSARs), and support all other data subject rights (erasure, rectification, objection, restriction and portability) within statutory deadlines. Oversee the handling of personal data breaches, ensuring prompt reporting and appropriate remedial action.
• Work with key internal stakeholders in the review of projects and related data to ensure compliance with applicable laws.
• Undertake DPIAs (and work with the business to identify when DPIAs are required)
• Maintain records of processing activities and ensure documentation is up to date and accurate.
• Review and provide guidance on contracts and data sharing agreements to ensure compliance with data protection requirements.
• Keep abreast of developments in data protection law and advise management of any changes affecting the organisation.
• Participate in LLA’s Information Security Committee meetings, ensuring that data protection risks, DPIA outcomes, and compliance issues are considered in cybersecurity decision‑making, program planning, and incident reviews.

Skills

UK GDPR knowledge

Data protection experience

Communication skills

Analytical skills

Project management

Integrity and confidentiality

Education

Data protection certification (CIPP/E, CIPM) desirable

Job description

London Luton Airport Operations Limited (LLAOL) is recruiting an Interim Data Protection Officer to lead and shape the DPO function under a 12-month fixed-term contract. The role is based in a hybrid pattern with 4–5 days per week and on-site presence required for at least two days.

You will own compliance with UK GDPR, the Data Protection Act 2018 and PECR, advise staff, manage DSARs and DPIAs, and work with IT, legal and cybersecurity teams to embed privacy by design across the organisation.