Data Protection and Compliance Consultant

Department: CSS Assure - CSS Assure - CSS Assure - CSS Assure - 3501

Employment Type: Permanent - Full Time

Location: Flexible

Reporting To: Caroline Bradshaw

An opportunity to help organisations navigate data protection and compliance, while building your expertise within a growing consultancy. You'll join CSS Assure at an exciting time, working with a varied client base across different sectors and helping businesses develop practical solutions to complex regulatory challenges.

We can offer you:

• The opportunity to work with a diverse range of clients and industries, keeping your work varied and interesting.
• The chance to develop your expertise across data protection, cyber security, information security and emerging areas such as AI governance.
• A collaborative environment where you can learn from colleagues across data protection, cyber security and the wider legal practice.
• The chance to contribute to a growing team, with opportunities for career development and cross-functional learning.

About the role

CSS Assure is an Information Security, Risk Management and Compliance Consultancy, helping organisations strengthen their cyber security resilience, data protection compliance and regulatory resilience.

As a Data Protection & Compliance Consultant, you'll deliver consultancy, assurance and advisory services to clients across a range of sectors, including healthcare, technology, financial services, professional services, public sector and critical infrastructure.

You'll manage defined client engagements and work streams, building trusted relationships and helping organisations understand and address their data protection risks. The role offers plenty of variety, as you'll work with different organisations, each with their own priorities, challenges and ways of working.

This is a great opportunity for someone with practical data protection experience who enjoys client-facing work and is looking to broaden their experience within a growing consultancy. Consultancy experience would be particularly beneficial, although we're also open to candidates looking to make the move from an in-house role.

You'll play an important role in delivering practical, high-quality data protection advice and support to CSS Assure clients. Your responsibilities will include:

• Delivering data protection audits, compliance reviews and maturity assessments, identifying risks and areas for improvement.
• Developing and helping clients implement proportionate data protection governance frameworks, policies and improvement plans, including as part of virtual DPO engagements.
• Advising clients on UK GDPR, EU GDPR and relevant data protection requirements.
• Producing clear audit reports, risk assessments, recommendations and remediation plans.
• Preparing and presenting clear reports and advice to client boards, senior leadership and other stakeholders on data protection risks, compliance priorities and progress.
• Supporting clients with data protection governance, policies, DPIAs, data mapping, records of processing and data subject rights.
• Building trusted relationships with client stakeholders and acting as a day-to‑day point of contact.
• Supporting data breach and incident response activities, including assessment, documentation and remediation.
• Helping clients respond to regulatory matters and investigations, escalating complex or high‑risk issues where appropriate.
• Developing and delivering data protection awareness and training sessions.
• Managing multiple client engagements, work streams and deadlines, ensuring work is delivered to a high standard.
• Working collaboratively with colleagues across data protection, cyber security and the wider consultancy team.
• Contributing…