Data Protection Officer - Northampton

Job summary

Data Protection Officer to join their team. This role focuses on two critical areas: operational support for GDPR compliance, particularly handling Data Subject Access Requests (DSARs), and ensuring day-to-day adherence to their Information Security Management System (ISMS).

Responsibilities

• Act as the main point of contact for receiving, investigating, and responding to Subject Access Requests (SARs) and other GDPR-related requests.
• Liaise with internal teams to gather the required data, ensure accuracy, and meet legal timeframes.
• Maintain clear records of request handling in line with regulatory and audit requirements.
• Provide input on GDPR matters where necessary, without being responsible for policy creation or process design.
• Support the ongoing maintenance of the Information Security Management System (ISMS).
• Conduct regular checks and reviews to confirm that existing security policies and processes are being followed.
• Identify gaps in compliance and follow up with internal stakeholders to ensure corrective actions are taken.
• Assist with evidence gathering and tracking actions for internal audits and external certification reviews (e.g., ISO

Skills

• Proven experience managing GDPR-related activities, especially actioning Subject Access Requests.
• Familiarity with data protection regulations and handling sensitive information securely.
• Hands-on experience working within an ISMS framework, ideally in environments aligned to ISO 27001.
• A methodical and structured approach to compliance verification and policy adherence.
• Excellent communication skills with the ability to follow up effectively with stakeholders.

Job description