Data Protection Consultant

Reporting to our Data Protection Team Lead, the Data Protection Consultant will work directly with our clients to scope, analyse and implement GDPR practices, processes and procedures. In addition to this, the GDPR Consultant role will complete and oversee the delivery of gap analyses, implementations and DPO services to our wide variety of customers.

In this role, you will be providing support with the handling and processing of Data Subject Access Requests (DSARs). The role will involve assisting with reviewing information, carrying out red actions where required, and supporting the wider team throughout the DSAR process. Full training and guidance will be provided, making this a great opportunity for someone looking to develop their knowledge and experience in data protection and compliance.

Due to the nature of the role, the position requires the ability to manage multiple clients simultaneously whilst ensuring a customer‑centric approach.

• Lead and manage GDPR projects, ensuring delivery is in line with client expectations;
• Act as an SME for all GDPR, PECR and other privacy-related matters;
• Work closely with the Sales to scope projects;
• Conduct GDPR Gap Analyses and GDPR Implementations (data mapping, developing policies and procedures, records of processing, DPIAs, LIAs etc.);
• Work closely with the GDPR Team Lead to oversee the project management, scheduling and delivery of all GDPR projects, completing and updating relevant records for reporting purpose.
• Deliver GDPR training as well as supporting clients with GDPR documentation, data breaches, and data subject access requests;
• Write content for articles and blog posts on data protection related topics;
• Any other appropriate job duties in line with the associated skill and experience of the post holder.

• Direct experience of leading Data Protection consultancy projects (scoping, gap analysis, and implementation) across small, medium and large businesses, with a strong understanding of tailored service delivery to suit client size and requirements;
• Qualified in one or more of the following: GDPR Practitioner (or equivalent), Certified DPO, IAPP CIPP/E qualification, Law Degree with a focus on GDPR/Privacy;
• Knowledge of CCPA and other international privacy laws highly desirable;
• Specific region or sector expertise (e.g., Scotland, Northern Ireland, health and social care, financial services) highly desirable
• Strong Microsoft Office skills;

• Ability to remain calm under pressure and meet deadlines;
• Strong organisational skills with a high attention todetail;
• Ability to prioritise and handle multiple tasks at any giventime;
• Pro‑active and enthusiastic with a can do attitude;
• Excellent verbal and written communication skills;
• Strong commercial acumen;
• Ability to work on own initiative as well as being a team player;
• Willingness to learn.

• International and national travel should be expected as part of the role;
• Must be eligible to live and work in the UK;

• Annual leave: 25 days, increasing by 1 day per each completed year of service up to a maximum of 28 days, plus statutory bank holidays which will be paid.

• Birthday Day Off: One additional day off for your birthday, to be taken a week either side of your birthday

• Private Medical Insurance Discounted individual coverage (available after successful completion of probation). Full individual cover after 3 years.

• Subsidised Gym / Wellbeing membership £15 per month subsidised membership (available after probation)

• VITO Days: 2 paid volunteer days per year (available after probation)

• Health Cash Plan Cash back on dental, optical and more, Employee Assistance Programme, Virtual GP and wellbeing resources (available from day one)

• UK…