Data Protection Specialist

Spencer Recruitment; Sandyford; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

Spencer Recruitment is partnering with a leading national organisation to recruit a Data Protection, Governance & Compliance Specialist in Dublin. This senior role leads the data protection programme, strengthens governance and ensures GDPR compliance across the organisation.

Reporting to the Head of Risk, Governance & Digital Transformation, the post champions privacy, information governance and responsible data management as the statutory Data Protection Officer.

Qualifications

• Relevant third-level qualification in law, business, public administration, risk management, information systems or related discipline.
• Strong knowledge of GDPR, the Data Protection Act 2018 and data governance principles.
• Experience in data protection, regulatory compliance, information governance or risk management.
• Experience in managing data incidents, DPIAs and regulatory engagement.
• Experience in supplier risk management or procurement governance.
• Excellent communication and the ability to work collaboratively across teams.
• The professional judgement, independence and discretion required of a Data Protection Officer.
• Experience in the public sector, a regulated environment or complex data ecosystems is relevant.

Responsibilities

• Act as the organisation’s statutory Data Protection Officer.
• Monitor GDPR compliance and Data Protection Act 2018.
• Conduct compliance audits, risk assessments and policy reviews.
• Maintain data protection policies, procedures and guidance.
• Deliver data protection training and awareness programmes.
• Provide expert advice to colleagues, senior management and governance committees.
• Lead the response to data incidents and personal data breaches.
• Oversee Subject Access Requests and other Data Subject Requests.
• Prepare and present reports to the Audit & Risk Committee.
• Lead and review Data Protection Impact Assessments.
• Conduct Privacy by Design reviews for new systems, projects and processes.
• Review contracts, procurement processes and data-sharing agreements for GDPR compliance.
• Act as the designated point of contact for the Data Protection Commission.
• Maintain Records of Processing Activities and other audit-ready documentation.
• Lead the continued development of the data governance framework.
• Establish governance structures, responsibilities and standards for data management.
• Promote responsible data use, quality and stewardship.
• Oversee the full data lifecycle from collection to deletion.
• Develop data retention and disposal schedules.
• Support data classification, metadata standards, data mapping and quality controls.
• Work with IT and security to ensure secure handling of information.
• Conduct supplier/vendor assessments and data-protection measures.

Skills

Data protection

GDPR compliance

Regulatory compliance

Information governance

Data incidents & DPIAs

Stakeholder engagement

Risk management

Policy development

Education

Third-level qualification in law, business or related discipline

Job description

Data Protection, Governance & Compliance Specialist

Dublin | Full-time | Hybrid

Spencer Recruitment is partnering with a leading national organisation to recruit a Data Protection, Governance & Compliance Specialist.

This is a senior specialist position responsible for leading our partner’s data protection programme, strengthening its data governance framework and ensuring compliance with GDPR, the Data Protection Act 2018 and wider regulatory requirements.

Reporting to the Head of Risk, Governance & Digital Transformation, the successful candidate will act as the organisation’s statutory Data Protection Officer. They will provide expert advice across the organisation and champion privacy, information governance and responsible data management.

Key responsibilities

Data protection and GDPR compliance

• Act as the organisation’s statutory Data Protection Officer.
• Monitor compliance with GDPR and the Data Protection Act 2018.
• Conduct compliance audits, risk assessments and policy reviews.
• Maintain data protection policies, procedures and guidance.
• Deliver data protection training and awareness programmes.
• Provide expert advice to colleagues, senior management and governance committees.

Data incidents and individual rights

• Lead the response to data incidents and personal data breaches.
• Investigate incidents, assess risk and maintain appropriate documentation.
• Manage regulatory notifications to the Data Protection Commission where required.
• Oversee Subject Access Requests and other Data Subject Requests.
• Act as the principal contact for internal and external data protection queries.

Advisory and regulatory governance

• Prepare and present reports to the Audit & Risk Committee.
• Lead and review Data Protection Impact Assessments.
• Conduct Privacy by Design reviews for new systems, projects and processes.
• Review contracts, procurement processes and data-sharing agreements for GDPR compliance.
• Act as the designated point of contact for the Data Protection Commission.
• Maintain Records of Processing Activities and other audit-ready documentation.

Data governance and information management

• Lead the continued development of the organisation’s data governance framework.
• Establish governance structures, responsibilities and standards for data management.
• Promote responsible data use, quality and stewardship.
• Oversee the full data lifecycle, including collection, storage, use, sharing, retention and deletion.
• Develop and implement data retention and disposal schedules.
• Support data classification, metadata standards, data mapping and quality controls.
• Maintain information-management policies and procedures.
• Work with IT and security colleagues to ensure information is handled securely and consistently.

Supplier, compliance and risk management

• Conduct assessments of suppliers and third-party data processors.
• Review vendors’ technical and organisational data-protection measures.
• Support supplier assurance, procurement governance and third-party risk management.
• Contribute to enterprise risk management and the mitigation of data-related risks.
• Support internal and external audits, including evidence gathering and corrective actions.
• Provide compliance reporting to senior management and governance committees.

Experience and qualifications

Candidates should have:

• A relevant third-level qualification in law, business, public administration, risk management, information systems or a related discipline.
• Strong knowledge of GDPR, the Data Protection Act 2018 and data governance principles.
• Experience in data protection, regulatory compliance, information governance or risk management.
• Demonstrable experience managing data incidents, DPIAs and regulatory engagement.
• Experience in supplier risk management or procurement governance.
• Strong analytical, organisational and problem-solving capabilities.
• Excellent communication skills and the ability to work collaboratively across different teams.
• The professional judgement, independence and discretion required of a Data Protection Officer.

Experience within the public sector, a regulated environment or an organisation with a complex data ecosystem would be particularly relevant.

Professional certifications such as CIPP/E, CIPM, CDMP or an equivalent data protection or governance qualification are desirable.

Closing date: 5:00 p.m. on Monday, 10 August 2026.