Data Protection and Compliance Officer

The Data Protection and Compliance Officer is responsible for the development, implementation, maintenance, and continual improvement of Maintel Integrated Management System (IMS), ensuring compliance with multiple international standards, regulatory requirements, customer obligations, data protection obligations, privacy governance requirements, and governance frameworks.

The role provides leadership across certification management, corporate governance, regulatory compliance and reporting, supplier assurance, environmental reporting, information security programmes, and data protection governance. The postholder will act as the primary coordinator for internal and external audits (excluding financial audit), certification bodies, regulatory submissions, supplier assurance portals, and data protection compliance activities, ensuring that risks are managed and compliance obligations are met.

The role is accountable for maintaining certification, compliance activities and reporting relating to multiple ISO standards, Cyber Essentials, Cyber Essentials Plus, PCI-DSS, NHS-DSP, NHS Evergreen Assessment, Ecovadis, UNGC, CDP, SECR, ESOS, UK GDPR, Data Protection Act 2018, PECR, privacy governance requirements, and customer assurance requirements and portals.

• Lead the management, maintenance, and continual improvement of the Integrated Management System.
• Ensure effective integration of business processes across all management system standards, certifications and customer supplier portals.
• Provide oversight of data protection governance as Data Protection Officer (DPO) ensuring privacy obligations and records are embedded across relevant business processes.
• Develop, review, and maintain policies, procedures, standards, forms, and registers.
• Manage document control processes and governance requirements.
• Coordinate management reviews and continual improvement activities.
• Produce compliance dashboards, KPI reports, and performance metrics for senior leadership.
• Lead Operational risk management and corporate risk review and reporting
• Management of team member focussed on Environmental aspects

ISO Certification Management

Maintain and support certification activities for:

• ISO 9001 – Quality Management
• ISO 14001 – Environmental Management
• ISO 45001 – Health and Safety
• ISO 22301 – Business Continuity Management
• ISO 27001 – Information Security Management
• ISO 27701 – Privacy Information Management
• ISO 42001 – Artificial Intelligence Management Systems

Responsibilities include:

• Internal audit planning and delivery.
• Certification audit coordination.
• Corrective action management.
• Risk and opportunity management.
• Objectives and performance monitoring.
• Management review preparation.
• Evidence gathering and audit readiness activities.

Governance & Compliance

• Maintain governance frameworks, compliance registers, legal registers, and regulatory obligations.
• Monitor relevant legislation, standards, and industry requirements.
• Support Board, Operating Board, and management governance reporting.
• Lead compliance improvement initiatives and governance projects.
• Manage risk registers and compliance controls.
• Provide subject matter expertise on regulatory and certification requirements.

Information Security & Cyber Compliance

• Coordinate annual Cyber Essentials and Cyber Essentials Plus assessments.
• Support PCI-DSS compliance activities and certification requirements.
• Coordinate annual NHS-DSP submission and external audit.
• Maintain security policies, standards, and awareness programmes.
• Assist with customer assurance requests and security questionnaires.
• Support security incident investigations and corrective actions.
• Monitor control effectiveness and governance requirements.

Data Protection, Privacy Governance & DPO

• Undertake Data Protection Officer (DPO)…