In-House Data Protection Specialist

Reporting directly to the Chief Privacy Officer, you will play a key role in the day-to-day delivery of data protection activity across the organisation. You will work closely with operational and delivery teams that handle personal data as part of their core activities, providing practical guidance and support.

This is not a strategic or policy-led role - it is about doing the work, supporting ongoing data protection activity, and helping colleagues identify and manage privacy risks in real time.

Key Responsibilities

• Coordinating and responding to Data Subject Access Requests (DSARs) in collaboration with internal teams and external providers
• Conducting, reviewing, and maintaining Data Protection Impact Assessments (DPIAs)
• Maintaining and updating the Record of Processing Activities (ROPA)
• Supporting data incidents and personal data breaches, working under the guidance of the Chief Privacy Officer
• Reviewing and advising on data protection clauses in contracts and data sharing agreements
• Delivering standard privacy training and contributing to internal awareness initiatives
• Monitoring data protection activity and preparing key metrics and updates for senior stakeholders
• Providing informal guidance and support to colleagues to promote consistent data protection practices across the organisation

Essential

• Strong working knowledge of UK GDPR, the Data Protection Act 2018, and relevant ICO guidance
• Hands-on experience managing DSARs, DPIAs, and maintaining data protection records
• Comfortable working across a complex, multi-divisional organisation
• Excellent attention to detail with the ability to manage multiple priorities
• Clear and confident communicator, able to support non-legal stakeholders

Desirable

• CIPP/E, BCS, or another recognised privacy qualification (or currently working towards one)
• Experience using data protection case management or privacy tools
• Exposure to AI-related data protection considerations, including automated decision-making or data governance
• Understanding of cybersecurity principles and how they relate to personal data handling, incidents, and risk

Flexible Working Model

LHH is an employment consultancy that believes in talent, not labels. We are committed to inclusive recruitment processes and encourage applications from candidates of all backgrounds and abilities. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.