Data Protection Officer (Ref: 198062)

Forsyth Barnes are delighted to be partnering with a longstanding client in the retail space on a Data Protection Officer opportunity.

The UK & Ireland Data Protection Officer (DPO) is responsible for overseeing and ensuring compliance with UK GDPR, EU GDPR, PECR and ePrivacy (as applicable), and any other related data protection legislation across the UK and Ireland for our client in the retail sector.

You will be acting as an independent and trusted advisor, the DPO provides expert guidance on data protection obligations, monitors regulatory compliance, and promotes a strong culture of privacy by design and accountability. The role serves as the primary point of contact for regulators, data subjects, and internal stakeholders on all data protection matters.

Success in this role means maintaining a compliant, risk‑aware culture, ensuring effective policies and controls, and proactively identifying and mitigating data privacy risks across the business and embedding privacy-by-design principles into all program of works where applicable.

·         Data Protection Strategy: 

·         Policies: 

·         Compliance Management:

·         Monitoring and Audit:

·         Regulatory & Legal Liaison:

·         Incident & Breach Management:

·         Training and Awareness: 

·         Leadership and Team Management: 

·         Supplier Risk Management:

·         Collaboration and Consultancy: 

·         Risk Assessment and Management:

·         Attention to detail and strong organisational and time management capabilities.

·         Excellent written and verbal communication, with the ability to adapt communication style across varied audiences and seniority levels.

·         Leadership and strategy skills including people management.

·         Strong risk management capability and ability to deliver practical, commercially‑aware solutions.

·         Strong influencing skills (soft / hard / active listening etc) – and the ability to blend and adapt them to the situation and intended audience.

·         Able to implement a holistic security program of strategy, policies, processes and technologies.

·         Being able to balance legislative requirements taking into consideration a commercial viewpoint

·         People management skills to direct and manage a small team of data privacy specialists.

Experience

·         7+ years’ experience in a DPO role, managing privacy operations complaints with the GDPR and PECR.

·         Experience leading, developing and managing teams.

·         Familiarity with Microsoft Purview, One Trust and other similar DSAR management and tooling.

·         Experience working in fast-paced and complex environments, working across multiple business units.

·         Experience with ISO 27001, ISO27701, ISAE 3000/3402 or other information security standards and frameworks.

·         Experience working in the retail sector is of benefit.

·         CIPP/E, CIPM or other Data Protection qualifications.

·         Internal audit qualifications are of benefit.

Degree educated, ideally in a relevant subject.

Salary will be between £60,000 and £75,000 with a bonus of up to 15%

You will be overseeing a team of three direct reports and two indirect reports.