Forsyth Barnes Consultancy
Data Protection Officer (Ref: 198062)
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the Role
Forsyth Barnes are delighted to be partnering with a longstanding client in the retail space on a Data Protection Officer opportunity.
Job Description
The UK & Ireland Data Protection Officer (DPO) is responsible for overseeing and ensuring compliance with UK GDPR, EU GDPR, PECR and ePrivacy (as applicable), and any other related data protection legislation across the UK and Ireland for our client in the retail sector.
You will be acting as an independent and trusted advisor, the DPO provides expert guidance on data protection obligations, monitors regulatory compliance, and promotes a strong culture of privacy by design and accountability. The role serves as the primary point of contact for regulators, data subjects, and internal stakeholders on all data protection matters.
Success in this role means maintaining a compliant, risk-aware culture, ensuring effective policies and controls, and proactively identifying and mitigating data privacy risks across the business and embedding privacy-by-design principles into all program of works where applicable.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Data Protection Strategy:
- Policies:
- Compliance Management:
- Monitoring and Audit:
- Regulatory & Legal Liaison:
- Incident & Breach Management:
- Training and Awareness:
- Leadership and Team Management:
- Supplier Risk Management:
- Collaboration and Consultancy:
- Risk Assessment and Management:
Requirements
- Attention to detail and strong organisational and time management capabilities.
- Excellent written and verbal communication, with the ability to adapt communication style across varied audiences and seniority levels.
- Leadership and strategy skills including people management.
- Strong risk management capability and ability to deliver practical, commercially-aware solutions.
- Strong influencing skills (soft / hard / active listening etc) – and the ability to blend and adapt them to the situation and intended audience.
- Able to implement a holistic security program of strategy, policies, processes and technologies.
- Being able to balance legislative requirements taking into consideration a commercial viewpoint
- People management skills to direct and manage a small team of data privacy specialists.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience
- 7+ years’ experience in a DPO role, managing privacy operations complaints with the GDPR and PECR.
- Experience leading, developing and managing teams.
- Familiarity with Microsoft Purview, One Trust and other similar DSAR management and tooling.
- Experience working in fast-paced and complex environments, working across multiple business units.
- Experience with ISO 27001, ISO27701, ISAE 3000/3402 or other information security standards and frameworks.
- Experience working in the retail sector is of benefit.
- CIPP/E, CIPM or other Data Protection qualifications.
- Internal audit qualifications are of benefit.
Degree educated, ideally in a relevant subject.
Benefits
Salary will be between £60,000 and £75,000 with a bonus of up to 15%
Other
You will be overseeing a team of three direct reports and two indirect reports.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London