Job Description
Data Protection & Information Governance Officer
We’re looking for a Data Protection & Information Governance Officer to take ownership of the compliance and governance framework within a business where the integrity, security and control of data are critical.
Working alongside an established technical security team, this role focuses on the structure, documentation and assurance that underpins it. It is about ensuring the organisation can clearly evidence what it does, why it does it and that it stands up to audit and external scrutiny.
You’ll be responsible for maintaining and developing data protection and information security frameworks, including policies, controls and documentation aligned to standards such as ISO 27001 and Cyber Essentials. You’ll manage the day-to-day administration of these frameworks, keeping them current, organised and embedded across the business.
The role will involve coordinating internal audits, supporting external certification processes and acting as a central point for compliance activity. You’ll work across teams to ensure policies are understood and followed, track risks and control actions and maintain key records such as data inventories, processing activities and incident logs.
You’ll also support GDPR and wider data protection obligations, including subject access requests, data handling processes and retention policies. This is a role that requires strong attention to detail, consistency and the ability to bring structure to complex or evolving requirements.
We’re looking for someone who understands the principles of data protection and information governance and enjoys owning the administrative engine behind it. You don’t need to be deeply technical, but you do need to be organised, methodical and confident working with frameworks, documentation and stakeholders across the business.
This is an opportunity to play a key role in a business where getting data protection and governance right genuinely matters, and where your work will have real visibility and impact.