Privacy Officer

Stott and May; Oxford; On-site; GBP 65,000 - 90,000; Full time

Job summary

Stott and May Inc. is seeking an experienced Privacy Officer to enhance the organisation's data protection framework and ensure ongoing compliance with UK and international privacy laws.

The role involves maintaining a Privacy Information Management System, conducting DPIAs, handling data breach responses, and advising senior stakeholders on privacy risk and governance. You will drive awareness and continuous improvement across the business.

Qualifications

• Strong knowledge of UK, European, and international data protection laws and privacy standards.
• Experience developing, implementing, or supporting data protection policies, controls, and best-practice frameworks.
• Ability to engage and influence stakeholders at all levels of the organisation.
• Experience documenting business processes and assessing privacy compliance requirements.
• Strong written and verbal communication skills.
• Relevant privacy qualification such as CIPP/E or equivalent.

Responsibilities

• Maintain and support the organisation's Privacy Information Management System (PIMS).
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Manage and support the investigation of privacy incidents and data breaches.
• Coordinate responses to data subject rights requests.
• Support the implementation and adoption of privacy management tools and software.
• Act as a trusted advisor to business stakeholders on privacy and data protection matters.
• Assist with privacy awareness campaigns, communications, and training initiatives.
• Support the development and continuous improvement of privacy policies, standards, and governance processes.

Skills

Data privacy governance

DPIA experience

Stakeholder engagement

Policy documentation

Communication skills

CIPP/E qualification

Education

CIPP/E or equivalent

Tools

Privacy management tools

Job description

Privacy Officer

We are seeking an experienced Privacy Officer to support and enhance an organisation's data protection and privacy compliance framework. The successful candidate will play a key role in ensuring ongoing compliance with UK and international data protection regulations, maintaining privacy governance processes, and supporting the delivery of privacy initiatives across the business. Working closely with senior privacy stakeholders and a network of business representatives, you will help ensure privacy policies, standards, and best practices are effectively implemented and embedded throughout the organisation.

Key Responsibilities

• Maintain and support the organisation's Privacy Information Management System (PIMS).
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Manage and support the investigation of privacy incidents and data breaches.
• Coordinate responses to data subject rights requests.
• Support the implementation and adoption of privacy management tools and software.
• Act as a trusted advisor to business stakeholders on privacy and data protection matters.
• Assist with privacy awareness campaigns, communications, and training initiatives.
• Support the development and continuous improvement of privacy policies, standards, and governance processes.

Essential Skills & Experience

• Strong knowledge of UK, European, and international data protection laws, regulations, and privacy standards.
• Experience developing, implementing, or supporting data protection policies, controls, and best practice frameworks.
• Ability to engage and influence stakeholders at all levels of the organisation.
• Experience documenting business processes and assessing privacy compliance requirements.
• Strong written and verbal communication skills.
• Relevant privacy qualification such as CIPP/E or equivalent.

Desirable Skills & Experience

• Experience working within a privacy programme, compliance function, or project environment.
• Experience supporting privacy initiatives within a complex, multi-functional organisation.
• Demonstrable experience investigating data breaches and advising on remediation and risk mitigation.
• Experience implementing or managing privacy governance and compliance tools.

Candidate Profile

• Proactive and detail-oriented privacy professional.
• Strong analytical and problem-solving skills.
• Comfortable working across multiple business areas and managing competing priorities.
• Passionate about promoting a strong culture of data protection and privacy compliance.