EU DPO & Security Lead – GDPR Ready

Blue Matter; London; Hybrid; NOK 1,133,000 - 1,511,000; Full time

Job summary

Blue Matter is a rapidly growing strategic consulting firm focusing on life sciences. This role leads information security, privacy, and data protection across Europe, acting as EU DPO and shaping the security programme for a fast-moving, AI-forward consultancy.

You will partner with EU Operations, IT, and clients, overseeing GDPR compliance, DPIAs, RoPA, and incident response while ensuring regulatory alignment and robust data protection controls.

Qualifications

• 5+ years in IT/security with governance and privacy focus.
• Strong knowledge of GDPR/UK GDPR and cross-border data transfers.
• Experience implementing ISO 27001 and SOC 2.
• Ability to communicate security concepts to leadership.
• UK-based with right to work; hybrid London area.

Responsibilities

• Own the information security programme end-to-end.
• Lead GDPR/UK GDPR readiness across EU/UK operations and data flows.
• Maintain RoPA, DPIAs, and data handling policies.
• Lead incident response planning and security questionnaires for clients.
• Collaborate with EU Operations, IT, and client teams to secure data.

Skills

GDPR & UK GDPR knowledge

ISO 27001 / SOC 2 experience

Hands-on IT security

Communication with leadership

AI/Automation mindset

Tools

Microsoft 365 security stack

Entra ID

Defender

Purview

Intune

Job description

Blue Matter is a rapidly growing strategic consulting firm focusing on life sciences. This role leads information security, privacy, and data protection across Europe, acting as EU DPO and shaping the security programme for a fast-moving, AI-forward consultancy.

You will partner with EU Operations, IT, and clients, overseeing GDPR compliance, DPIAs, RoPA, and incident response while ensuring regulatory alignment and robust data protection controls.