About the Role Our client is seeking an experienced Data Protection Specialist to strengthen their data governance and compliance capabilities. This is a key role within their organisation, focusing on ensuring responsible and compliant handling of personal data across all operations. This position is not linked to a specific project, but rather encompasses a broad range of critical subject areas, including: Conducting and overseeing Data Protection Impact Assessments (DPIAs) for high-risk processing activities. Managing third-party vendor data protection risk, from initial due diligence through to ongoing monitoring. Overseeing personal data breach incident response, ensuring timely containment, investigation, and reporting. Monitoring and maintaining data retention processes, ensuring compliance with legal, regulatory, and business requirements. This role offers the opportunity to work collaboratively with teams across the business, embedding best practice and promoting a culture of trust, accountability, and continuous improvement in data protection. Essential Skills and Attributes Demonstrable expertise in data protection and privacy compliance (e.g. GDPR or equivalent frameworks). Strong understanding of data protection risk assessment and mitigation processes. Proven experience in data breach management and incident response coordination. Desirable Skills and Attributes Collaboratively curious — keen to engage with colleagues to find pragmatic, compliant solutions. Trustworthy and ethically minded, with a strong sense of responsibility. Resilient under pressure and able to adapt to changing priorities. Demonstrates integrity and discretion in handling sensitive information. Listens actively and builds effective working relationships. Adaptable and proactive in staying up to date with evolving data protection requirements.