Robert Walters
Data Protection Officer & EMEA Head of Data Protection
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Join a Market-Leading, Well Recognised Organisation
About the Role
Join a market-leading, well-recognised organisation in this Data Protection & Privacy role based in London (EMEA remit). A leading global organisation is seeking a highly knowledgeable Data Protection Officer and EMEA Head of Privacy to drive its data privacy and protection strategy across Europe, the Middle East, and Africa.
Key Responsibilities
As Data Protection Officer and EMEA Head of Privacy, your day-to-day responsibilities will centre around building a resilient privacy compliance framework that supports business objectives while safeguarding personal data. You will work closely with senior stakeholders to advise on regulatory risks, oversee complex international data transfers, manage records of processing activities, respond to data subject requests, lead incident investigations, and coordinate regulatory reporting. Your expertise will be instrumental in driving continuous improvement through regular audits, risk assessments, training initiatives, and collaborative engagement with external advisers. By fostering a culture of privacy awareness across all levels of the organisation—from executive leadership to operational teams—you will ensure that every aspect of business activity aligns with best practice in data protection. Success in this role requires you to balance strategic vision with practical implementation while maintaining open lines of communication between legal functions, IT departments, business units, regulators, suppliers, and external consultants.
Key Responsibilities:
- Maintain and enhance the EMEA data protection strategy and governance framework by ensuring all policies, standards, and procedures remain current with applicable privacy laws.
- Provide strategic advice to senior management and business leaders on privacy-related risks, opportunities, and regulatory developments across EMEA.
- Monitor changes in privacy legislation and oversee implementation of required adjustments to maintain compliance throughout the region.
- Promote a culture of privacy-by-design and privacy-by-default within all business units by developing effective communication channels and guidance materials.
- Act as the principal point of contact for the UK Information Commissioner's Office (ICO) regarding all UK privacy matters, responding to enquiries from data subjects.
- Oversee compliance with UK GDPR, EU GDPR, PECR, and other relevant privacy legislation by managing records of processing activities and associated documentation.
- Advise on international data transfers including transfer impact assessments, mechanisms, and support compliance with emerging privacy laws across EMEA jurisdictions.
- Lead privacy risk assessments and data protection impact assessments (DPIAs), advising on high-risk processing activities while maintaining robust risk registers for each business unit.
- Manage incident response processes related to personal data breaches by assessing reportability requirements, coordinating notifications to regulators or affected individuals, and collaborating with legal and IT teams.
- Develop and deliver comprehensive privacy training programmes in partnership with Learning & Development teams while leading external advisers or consultants as needed.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You Bring
Required:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Qualified solicitor or barrister status or equivalent legal qualification is essential; alternatively experience in a DPO role is necessary.
- Extensive experience leading privacy and data protection programmes within multinational organisations operating across EMEA jurisdictions is highly desirable.
- Detailed knowledge of UK GDPR, EU GDPR, Data Protection Act 2018, PECR regulations as well as international data transfer requirements is crucial for success.
- Proven track record acting as or supporting a Data Protection Officer in a complex organisational setting is expected.
- Strong understanding of privacy risk management frameworks coupled with experience engaging regulatory authorities is necessary.
- Ability to provide commercially focused pragmatic advice on contractual arrangements involving suppliers or technology procurements is important.
- Excellent communication skills combined with stakeholder management capabilities are vital for influencing senior executives effectively.
Desirable:
- Privacy professional certifications such as CIPP/E, CIPM, CIPT or BCS Practitioner Certificate in Data Protection are advantageous but not mandatory.
- Experience managing privacy matters related to artificial intelligence governance or emerging technology regulation would be beneficial.
- Demonstrated ability to develop targeted training programmes for diverse audiences including senior management is preferred.
Desired Skills and Experience
- Data Protection
- Privacy
- EMEA
- GDPR
- AI Governance
- Counsel
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location