Rodeo
Get started

Roche

Data Protection Officer

England
Posted about 21 hours ago
Sign up to applySee more jobs like this
Get notified of more jobs like this · No spam, ever

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Job Title: Data Protection Officer (DPO)

Reports To: Director of Legal and Compliance (Senior Leadership Team)

Location: Burgess Hill, UK

About The Role

We are seeking an experienced, high-visibility Data Protection Officer (DPO) to lead our privacy compliance strategy and champion a strong data protection culture. Operating with complete statutory independence, you will serve as the primary advisor to the Senior Leadership Team (SLT), direct our local privacy framework, and oversee high-impact digital health and AI initiatives.

You will lead the Local Privacy Office, line manage the Data Privacy Manager, and serve as our designated point of contact for regulators and data subjects.

Key Responsibilities

  • Strategic Leadership & Independence: Operate with statutory independence to set the position of the Local Privacy Office, advise senior leadership, and promote data privacy at the highest management levels
  • Regulatory Oversight: Act as the formal, designated contact point for regulators (ICO and ROI Data Protection Commission) and data subjects. Manage formal inquiries and data subject requests
  • Risk Management & DPIAs: Provide risk-based guidance on high-impact technology, special category data, and digital health initiatives. Provide final sign-off on Data Protection Impact Assessments (DPIAs)
  • Breach Response & Reporting: Solely authorize, oversee, and direct the reporting of personal data breaches to regulatory authorities and affected data subjects
  • Team & Framework Management: Line manage and mentor the Data Privacy Manager while coordinating the Local Privacy Office. Oversee compliance monitoring, internal audits, and frameworks (ISO27001, CyberEssentials Plus, DSPT)

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

Key Relationships

Internal

  • Affiliate Legal & Compliance Department
  • Senior Leadership Team (SLT)
  • Group Privacy stakeholders
  • Data Privacy Liaisons
  • IT/Cybersecurity teams

External

  • Information Commissioner's Office (ICO)
  • Data Protection Commission (ROI)
  • data subjects
  • trade bodies

Qualifications & Experience

Essential Criteria

  • Relevant Degree
  • Proven track record delivering data privacy compliance frameworks within a complex organization
  • Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018
  • Leadership experience managing teams, projects, and influencing matrix stakeholders
  • Experience with emerging technologies (e.g., AI), digital health, and information governance systems (e.g., ISO27001)
  • Strong risk analysis, analytical, project management, and communication skills

Desirable Criteria

  • CIPP (Certified Information Privacy Professional) or recognized privacy qualification.

Core Competencies & Values

Roche Core Values

  • Integrity
  • Courage
  • Passion

Decision Making & Expertise

  • Independent judgment
  • Commercial awareness
  • Healthcare/IT sector awareness

Leadership & Collaboration

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job
  • Ability to inspire, coach junior team members
  • Navigate change
  • Foster open communication under pressure

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

The statements herein are intended to describe the general nature and level of work being performed by employees, and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of Roche Products Ltd. At Roche Products we believe diversity drives innovation and we are committed to building a diverse and flexible working environment. All qualified applicants will receive consideration for employment without regard to race, religion or belief, sex, gender reassignment, sexual orientation, marriage and civil partnership, pregnancy and maternity, disability or age. We recognise the importance of flexible working and will review all applicants’ requests with care. At Roche difference is valued and we are proud to be an equal opportunity employer where you are encouraged to bring your whole self to work.

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Data Privacy Compliance
UK GDPR
EU GDPR
Data Protection Act 2018
Risk Analysis
DPIA
Information Governance
Stakeholder Management
Team Leadership
Project Management
Regulatory Reporting
AI Governance
Digital Health Compliance
ISO27001
CyberEssentials Plus
DSPT

Location

England, United Kingdom

Sign up to applySee more jobs like this