- Company Name
- Data Protection People
- Job Title
- Data Protection Consultant at Data Protection People
- Job Description
-
Job title: Data Protection Consultant
Role Summary: Provide expert data protection advice, function as Data Protection Officer, lead compliance remediation projects, manage a portfolio of clients, conduct audits and gap analyses, develop and implement policies, adhere to UK GDPR, DPA 2018, and PECR.
Expectations: Work independently across multiple projects, deliver high‑quality reports and documentation, communicate clearly with all stakeholder levels, adapt to diverse sectors, support data‑rights processes, and maintain relevant professional qualifications.
Key Responsibilities:
- Act as DPO for clients, interpreting and applying UK data protection law.
- Conduct audits, gap analyses, and risk assessments to identify compliance gaps.
- Develop and implement data protection policies, procedures, and Records of Processing Activities (ROPA).
- Lead compliance remediation following internal or external audits.
- Manage a client portfolio, delivering tailored data protection services.
- Support Subject Access Requests (SARs) and other data‑rights queries.
- Deliver client training and provide practical guidance on regulations.
Required Skills:
- In‑depth understanding of UK GDPR, DPA 2018, and PECR.
- Strong knowledge of information risk management and security practices.
- Excellent analytical, problem‑solving, and report‑writing abilities.
- Effective client engagement, training delivery, and communication at all levels.
- Proven project management, multi‑tasking, and deadline‑orientation.
- Proactive, adaptable, and collaborative mindset.
Required Education & Certifications:
- Bachelor’s degree in Law, Information Security, Risk Management, or related field.
- At least one recognized data protection certification (e.g., BCS/ISEB Data Protection, PDP Practitioner, IAPP CIPP/E, CIPM, CIPT, or GDPR Practitioner Certificate).
- Minimum of 4 years experience in data protection, compliance, or information security is preferred (not mandatory).