Data Protection Specialist

Right across infrastructure, there’s a requirement to not only maintain, but also renew and reimagine. Whatever stage you’re at in your career, with us you’ll have an opportunity to grow and develop. Delivering essential infrastructure services for life, while being safety first, and client and customer centric in a friendly, fun and respectful environment where you are encouraged to thrive.

Where will you be working?

As an organisation, there is little we don’t do and plenty to get involved in. Our Group Support roles are vital in making sure we can help over 11,000 people deliver essential infrastructure seamlessly across water, energy, transport and telecom.

About the Role

As Data Protection Specialist, you will support the Chief Privacy Officer (CPO) in completing the Group’s data protection compliance activities. This role provides day-to-day support to the CPO, ensures operational consistency in data protection practices, and acts as a point of contact across business divisions.

You will play a hands-on role in ensuring that the Group meets its compliance objectives linked to data protection laws including UK GDPR and the Data Protection Act 2018, helping to embed a strong culture of privacy across the Group.

What will you be doing?

Reporting to the Data Protection Manager, you'll support the organisation's privacy and data protection activities, helping to ensure compliance with UK GDPR and other regulatory requirements while promoting privacy-by-design across the business.

• Coordinate privacy assessments, including DPIAs, LGIAs and PIAs, managing risks and documenting appropriate mitigation actions.
• Handle Data Subject Access Requests (DSARs) and other individual rights requests, ensuring responses are delivered accurately and within statutory deadlines.
• Work closely with business stakeholders to maintain the Record of Processing Activities (RoPA), support vendor privacy due diligence, oversee data retention activities and help ensure appropriate controls are in place for international data transfers and third-party processing arrangements.
• Assist with data protection incidents and potential breaches, maintain privacy notices, policies and procedures, and support audits by preparing evidence and ensuring documentation remains accurate and up to date.
• Provide privacy-by-design support for projects, system changes and new technologies, while developing guidance and awareness materials that help colleagues understand and meet their data protection responsibilities.