Senior Privacy Consultant / Data Protection Officer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Provide Harper James’s outsourced Data Protection Officer (DPO) service

• Assist ambitious companies with their daily data protection requirements

• Cultivate client relationships and offer practical privacy guidance

• Serve as the appointed DPO for clients when appropriate

• Comprehend each client's business, establish priorities, assess progress, and deliver clear advice

• Aid clients in executing and sustaining effective privacy programs

• Evaluate privacy compliance, pinpoint gaps, and create enhancement plans

• Counsel on data protection impact assessments and oversee resultant actions

• Maintain documentation of processing activities, privacy notices, policies, and retention schedules

• Assist with data subject access requests and other individual rights inquiries

• Evaluate suppliers, data-sharing agreements, and international transfers

• Support breach evaluations, incident responses, and engagement with regulators

• Provide data protection training to diverse audiences

• Collaborate with founders, senior managers, HR, and IT departments

• Constructively challenge decisions when necessary

• Manage competing priorities and keep thorough records

• Partner with data protection attorneys on complex legal matters

• Contribute to the development of Harper James’s processes and resources as the service evolves

⛳️ Requirements

• Extensive experience in data protection, usually acquired over five or more years

• Proven track record of managing a privacy program or a portfolio of clients

• Background in outsourced DPO services, privacy consultancy, in-house data protection teams, or information governance

• Capability to evaluate privacy compliance, identify deficiencies, and formulate practical improvement strategies

• Proficiency in advising on data protection impact assessments and tracking resulting actions

• Skill in maintaining records of processing, privacy notices, policies, and retention schedules

• Experience in supporting data subject access requests and other individual rights inquiries

• Ability to evaluate suppliers, data-sharing arrangements, and international transfers

• Experience in breach assessments, incident responses, and interactions with regulators

• Competence in delivering training and clarifying data protection requirements to various audiences

• Strong understanding of UK GDPR, the Data Protection Act, and PECR

• Familiarity with relevant European regulations

• Experience in AI governance or technology projects is advantageous

• CIPP/E, CIPM, or equivalent certification is preferred

• Confidence in working with founders, senior managers, HR, and IT teams

• Ability to handle competing demands and maintain meticulous records

• Capability to identify when specialized legal or technical advice is required

• Proficiency with Microsoft 365 and willingness to learn new systems

• Ability to explore responsible applications of technology and AI

• A law degree or qualified solicitor status is not a prerequisite

🏝️ Benefits

• Flexible remote working arrangements

• 33 days of annual leave, inclusive of public holidays

• Option to acquire up to five additional leave days

• Private healthcare coverage

• Life assurance benefits

• Access to an electric vehicle scheme

• Diverse work with expanding businesses

• Opportunity to influence the growth of the privacy service