Data Protection Specialist

Are you passionate about data protection, information governance, and helping organisations navigate complex regulatory requirements? Do you enjoy building trusted client relationships and providing practical solutions to real-world compliance challenges?

We're looking for an enthusiastic and self-motivated Data Protection Specialist to join our growing consultancy team, supporting a diverse portfolio of clients across healthcare, digital health, MedTech, and wider regulated sectors. From innovative start-ups to established organisations, you'll play a key role in helping clients achieve and maintain compliance while enabling business growth.

About the opportunity:

This is a remote position with flexible working, designed to support a healthy work-life balance. You'll collaborate with a talented team and meet in person for team events at least quarterly (all expenses covered). Like the existing consultancy roles within the business, you'll work directly with a variety of clients, providing expert guidance and managing multiple projects simultaneously.

In this role, you will:

•  Provide expert advice on data protection, privacy, and information governance requirements
• Conduct and support Data Protection Impact Assessments (DPIAs)
• Draft and review Data Sharing Agreements, Data Processing Agreements, and privacy documentation
• Support clients with Subject Access Requests and data subject rights management
• Investigate and manage personal data breaches and support incident response activities
• Assist clients with compliance against UK GDPR and relevant healthcare information governance requirements
• Support NHS DSPT and DTAC submissions where required
• Develop and implement policies, procedures, and governance frameworks
• Build strong client relationships and act as a trusted advisor
• Work closely with internal specialists and clients to deliver successful project outcomes
• Manage multiple client engagements in a fast-paced consultancy environment

Essential experience:

• Strong understanding of UK GDPR and the Data Protection Act 2018
• Experience conducting DPIAs and supporting privacy compliance programmes
• Excellent written communication and policy drafting skills
• Strong stakeholder management and relationship-building abilities
• Ability to explain complex regulatory requirements in a practical and understandable way
• Highly organised, methodical, and detail-oriented
• Comfortable managing multiple priorities and client requirements
• Able to work independently while contributing effectively within a collaborative team
• A proactive, solutions-focused approach to problem solving

Why you will love working here:

• An excellent salary between £40,000 and £45,000 depending on experience
• 28 days annual leave including bank holidays and your birthday off!
• Fully remote working with quarterly in-person events We gather for face-to-face team events every quarter with all expenses covered to foster connection and collaboration.
• Vitality Healthcare
• Life Assurance 4x Salary
• Training & Development: Ongoing access to professional training and personal development initiatives to help you grow both personally and professionally.

If you're looking for a role where you can combine your passion for data protection with meaningful client interaction, professional development, and the flexibility of remote working, we'd love to hear from you.