Privacy Officer

Stott and May; England; On-site; GBP 60,000 - 90,000; Full time

Job summary

Stott and May Inc. is seeking an experienced Privacy Officer to support and enhance our data protection framework.

The successful candidate will ensure ongoing compliance with UK and international data protection regulations, maintain privacy governance processes, and drive privacy initiatives across the business. You will work with senior privacy stakeholders and business representatives to embed privacy policies, standards, and best practices, conduct DPIAs, manage data breach investigations,

Qualifications

• Proven experience managing privacy governance frameworks.
• Strong knowledge of UK, EU, and international data protection laws.
• Ability to document processes and assess privacy compliance requirements.
• Experience supporting privacy initiatives in complex organisations.

Responsibilities

• Maintain and develop the organisation's Privacy Information Management System (PIMS).
• Conduct DPIAs and privacy risk assessments to address privacy threats.
• Manage investigations of privacy incidents and data breaches.
• Coordinate responses to data subject rights requests in a timely manner.
• Support privacy tool adoption and governance across the business.
• Advise senior stakeholders on data protection matters and policy changes.
• Contribute to privacy awareness campaigns and training initiatives.
• Help improve privacy policies, standards, and governance processes.

Skills

Privacy governance

Data protection

Stakeholder engagement

Policy development

Education

CIPP/E or equivalent

Job description

We are seeking an experienced Privacy Officer to support and enhance an organisation's data protection and privacy compliance framework. The successful candidate will play a key role in ensuring ongoing compliance with UK and international data protection regulations, maintaining privacy governance processes, and supporting the delivery of privacy initiatives across the business. Working closely with senior privacy stakeholders and a network of business representatives, you will help ensure privacy policies, standards, and best practices are effectively implemented and embedded throughout the organisation.

Key Responsibilities

• Maintain and support the organisation's Privacy Information Management System (PIMS).
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Manage and support the investigation of privacy incidents and data breaches.
• Coordinate responses to data subject rights requests.
• Support the implementation and adoption of privacy management tools and software.
• Act as a trusted advisor to business stakeholders on privacy and data protection matters.
• Assist with privacy awareness campaigns, communications, and training initiatives.
• Support the development and continuous improvement of privacy policies, standards, and governance processes.
• Strong knowledge of UK, European, and international data protection laws, regulations, and privacy standards.
• Experience developing, implementing, or supporting data protection policies, controls, and best practice frameworks.
• Ability to engage and influence stakeholders at all levels of the organisation.
• Experience documenting business processes and assessing privacy compliance requirements.
• Strong written and verbal communication skills.
• Relevant privacy qualification such as CIPP/E or equivalent.
• Experience working within a privacy programme, compliance function, or project environment.
• Experience supporting privacy initiatives within a complex, multi-functional organisation.
• Demonstrable experience investigating data breaches and advising on remediation and risk mitigation.
• Experience implementing or managing privacy governance and compliance tools.

Candidate Profile

• Proactive and detail-oriented privacy professional.
• Strong analytical and problem-solving skills.
• Comfortable working across multiple business areas and managing competing priorities.
• Passionate about promoting a strong culture of data protection and privacy compliance.