Public Sector Resourcing
Data Protection Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Data Protection Specialist (Inside IR35) - 4 Month Contract
On behalf of The Maritime and Coastguard Agency (DfT MCA) we are looking for a Data Protection Specialist (Inside IR35) for a 4 month contract. Remote working.
The Data Protection team works as part of the Maritime and Coastguard Agency’s (MCA’s) Corporate Governance framework to inform the Agency’s compliance with Data Protection and Information Access Legislations.
The Data Protection Specialist will support and deputise for the Head of Data Protection, ensuring that provision of expert data protection advice to the organisation is delivered in a timely and compliant manner.
The role will support the Head of Data Protection in carrying out the delegated statutory tasks of the Department for Transport (DfT) Data Protection Officer (DPO), to facilitate and support the MCA’s compliance with Data Protection Legislations, ensuring a sensible and proportionate approach is taken to help the department do its business in a way that inspires staff and public trust and confidence.
Responsibilities
As a Data Protection Specialist your main responsibilities will be to:
- Support the Head of Data Protection in the provision of expert advice to the MCA, its suppliers and employees on a wide range of data protection matters, ensuring a sensible and proportionate approach is taken to help the department process personal data in a lawful way that inspires staff and public trust and confidence, with the provision of timely, accurate and well-written expert advice.
- Manage the Data Protection Impact Assessment (DPIA) process, ensuring the agency undertakes DPIAs when required. Advise on and assess risks identified in Data Protection Impact Assessments, working with stakeholders to mitigate risks. Assist in the management of referrals to the DPO and Information Commissioner Office (ICO) where residual risk remains high.
- Manage the Data Protection risk register identifying data protection compliance risks alongside other business risks. Escalating these risks to the Head of Data Protection, the DPO and MCA Senior Information Responsible Officer (SIRO) in accordance with internal risk escalation procedures.
- Maintain the record of processing activities (ROPA) log, ensuring capture and record of associated privacy notices, Data Protection Impact Assessments (DPIAs), Data Sharing Agreements and compliance activities that relate to the processing activity.
- Assist the Head of Data Protection in responding to formal complaints received from data subjects, managing the logging and recording of complaints processed and assisting with complaint investigations.
- Review and maintain the MCA’s Privacy Notices, ensuring data subjects are accurately informed about MCA processing and the rights available to them. Ensuring relevant and accessible Privacy Notices are in place where required.
- Manage and maintain the MCA’s data protection policies and procedures, ensuring they are regularly updated to reflect changes in legislation. Provide specialist data protection input into Agency-wide policies, in particular Information Security Policies.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential
- Experience in data protection, successfully obtained Data Protection Practitioners Certificate, or have sufficient comparable prior experience and knowledge to undertake this soon after starting the role.
- Experience in information security principals and standards and be able to apply this alongside data protection legislation to advise data and security professionals in developing data management standards and processes.
- A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
- Excellent communication skills, both verbal and written, highly skilled in the delivery and absorption of information with colleagues at all levels.
- Excellent presentation and public speaking ability, particularly with regard to delivery of training and reporting to senior executives.
- A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
- Understanding of how public sector organisations work (governance) and the application of the information access and data protection regimes to public sector bodies, including understanding of records management regulations and best practices.
- Experience in risk management methodologies


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Important Notes
Please be aware that this role can only be worked within the UK and not Overseas.
Disability Confident
As a member of the Disability Confident Scheme, DfT guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
Armed Forces Covenant
DfT guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
Off Payroll Working Legislation
In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location