Data Protection Advisor

Data Protection Advisor

Location: Plymouth or Exeter – Hybrid

Hours: Permanent, Part Time (15-20 hours per week, with flexible working available)

Salary: £28,000 - £32,000 pro rata (DOE)

About the Role

We are seeking a highly skilled Data Protection Advisor to support our customer organisations in meeting their statutory obligations and best practices in information governance, data protection, and risk management. This role is crucial in providing expert guidance, fostering a culture of compliance, and driving continuous improvement.

Please note, the successful candidate must be located within commuting distance of Plymouth or Exeter as regular in-person meetings in both locations will be required.

Key Responsibilities

• Act as the Designated Data Protection Officer (DPO) for assigned customers, ensuring full compliance with UK GDPR, the Data Protection Act 2018, and Caldicott standards.
• Lead investigations, assessments, and reporting of data breaches, identifying root causes and implementing corrective actions.
• Maintain and update risk registers, advising on Data Protection Impact Assessments (DPIAs) and risk mitigation strategies.
• Provide specialist advice to leadership teams, ensuring alignment with legal and regulatory frameworks.
• Support the creation and maintenance of key compliance documents such as Data Processing Agreements and Privacy Notices.
• Develop and deliver training, monthly bulletins, and awareness campaigns to increase understanding of data protection across all stakeholder levels.
• Monitor and track legislative updates from governing bodies (e.g., ICO, NHS England), ensuring new requirements are integrated into policies and procedures.
• Coordinate responses to Subject Access Requests (SARs) to ensure compliance with legal obligations.
• Lead data flow assessments, maintain Records of Processing Activities (ROPA), and ensure data mapping documentation is accurate.
• Assist in supplier risk assessments, due diligence, and contract reviews to enhance security within the supply chain.
• Promote Privacy by Design/Default principles, advising on consent management and legitimate interest assessments.
• Support customers in achieving Data Security and Protection Toolkit (DSPT) compliance to meet NHS and industry standards.
• Identify opportunities to enhance data protection processes and best practices.

About You

• Proven experience in a similar role and/or CIPP/E (Certified Information Privacy Professional/Europe) or equivalent qualification.
• Expert knowledge of data protection legislation (UK GDPR, Data Protection Act, PECR) and its intersection with laws such as the Health and Social Care Act, NHS Act, and Mental Capacity Act.
• Strong analytical skills, with the ability to assess risks, interpret legal requirements, and communicate complex information clearly.
• Excellent stakeholder management, customer service, and presentation skills.
• Ability to work autonomously, manage priorities effectively, and problem-solve independently.
• Familiarity with Office 365 and digital governance tools.

Why Join Us?

This is an exciting opportunity to play a key role in shaping information governance practices for customer organisations. You will have the flexibility to work part-time hours in a supportive environment, where your expertise will directly contribute to maintaining compliance and best practices in data protection.

If you want to know more about the benefits package we offer, please see our future employee page here https://deltservices.com/careers/benefits-and-perks/

Apply Now

If you are passionate about data protection and want to make a meaningful impact, we’d love to hear from you.