Job Description
\
Sisk seeks a seasoned Data Protection Officer to spearhead their data protection programme. This individual will ensure global data protection laws and regulations are upheld, serving as the key liaison with regulators, stakeholders, and senior leadership.\
\
The successful candidate will develop and implement policies, oversee compliance, and act as the primary contact for privacy matters. They will provide guidance across business units, manage risk, and safeguard personal data in line with GDPR, the EU AI Act, and international standards.\
\
Key Responsibilities: \
\
1. Develop, implement, and oversee Group-wide data protection policies, procedures, and compliance frameworks\\/li>\
2. Act as the main point of contact for regulators, supervisory authorities, and internal stakeholders on all data protection matters\\/li>\
3. Manage and respond to Data Subject Rights requests, including access, rectification, and erasure\\/li>\
4. Lead Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and ensure privacy is integrated into projects by design and default\\/li>\
5. Maintain and update the Record of Processing Activities (ROPA), ensuring accuracy of data flows and inventories\\/li>\
6. Oversee data breach management, including investigation, reporting, and communication with regulators as required\\/li>\
7. Deliver training and awareness programmes to employees at all levels to promote a strong culture of data protection and accountability\\/li>\
8. Monitor emerging data protection and AI regulatory developments and advise the business on compliance requirements\\/li>\
9. Collaborate with IT, HR, Legal, Compliance, and other stakeholders to embed data protection across operations\\/li>\ \
\
Required Skills and Qualifications
\
The ideal candidate will possess:
\
\
10. Significant experience in data protection, privacy, compliance, or governance roles with responsibility for policy development and oversight\\/li>\
11. Proven experience advising senior leaders and boards on data protection issues\\/li>\
12. Strong knowledge of GDPR, the EU AI Act, UK Data Protection Act, US privacy laws, and other international frameworks\\/li>\
13. Experience managing complex projects across multiple jurisdictions\\/li>\
14. Demonstrated ability to balance regulatory requirements with practical business needs\\/li>\
15. Track record of managing sensitive information with confidentiality and integrity\\/li>\
16. Professional certifications such as CIPP\/E, CIPM, or CIPT are highly desirable\\/li>\
17. Degree in law, business, IT, compliance, or related field preferred\\/li>\
18. Strong leadership, stakeholder management, and communication skills\\/li>\
19. Excellent analytical and organisational ability with high attention to detail\\/li>\
20. Experience delivering training and awareness programmes on compliance or data protection\\/li>\
21. Familiarity with IT security and risk management frameworks such as ISO 27001 or NIST is advantageous\\/li>\ \
\
Benefits
\
At Sisk, we value our employees' growth and well-being. We offer:
\
\
22. Competitive salary and benefits\\/li>\
23. Flexible and hybrid working arrangements\\/li>\
24. Structured professional development\\/li>\
25. Collaborative environment that values trust, accountability, and respect\\/li>\ \
\
Equal Opportunities Employer
\
Sisk is an equal opportunities employer committed to diversity and inclusion. All applicants will be considered without regard to age, disability, gender, gender identity, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sexual orientation, or socio-economic background.\