Data Governance and Compliance Officer

Data Governance & Compliance Officer 📍 West Midlands | Hybrid Working (3 days office / 2 days home) Permanent, full time position LHH are excited to be partnering with a well known in-house organisation in Birmingham, to help them secure a data protection and compliance professional looking for an opportunity to make a real impact within a large, customer-focused organisation. We're partnering with a respected and well-established business that is seeking a Data Governance & Compliance Officer to take ownership of its data protection framework and serve as the organisation's statutory Data Protection Officer (DPO). This is a highly visible role where you'll work closely with senior stakeholders, legal, compliance and information security teams to drive best practice across data governance, privacy and compliance. The Opportunity As the organisation's subject matter expert for data protection, you will:

• Act as the first point of contact for all data privacy and governance matters
• Lead data protection audits across the business and third-party suppliers
• Maintain and enhance the organisation's data governance framework
• Advise senior leaders on privacy, risk and compliance issues
• Manage Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs)
• Support responses to Data Subject Access Requests (DSARs) and Freedom of Information requests
• Review and negotiate data processing agreements with suppliers
• Liaise directly with the Information Commissioner's Office (ICO) on regulatory matters
• Deliver training and awareness programmes to promote a strong culture of data protection
• Monitor regulatory developments and ensure ongoing compliance with UK data protection legislation About You We're interested in speaking with candidates who can demonstrate:
• At least 2 years' experience in a data protection, compliance, legal, audit or risk-based role
• Experience operating within a customer-focused or B2C environment
• Strong working knowledge of UK GDPR, Data Protection Act requirements and ICO guidance
• Experience conducting DPIAs and handling DSARs and FOI requests
• Experience engaging directly with the ICO on registrations, complaints or investigations
• Experience reviewing and negotiating Data Processing Agreements
• Strong stakeholder management skills, with the confidence to engage at all levels of the business
• A recognised data protection qualification such as:
• BCS Practitioner Certificate in Data Protection
• Data Protection & Information Governance Practitioner (Level 4)
• Certified Information Privacy Manager (CIPM) Why Apply? This position offers the opportunity to:
• Influence data governance strategy across a complex organisation
• Work closely with senior leadership teams
• Drive meaningful compliance improvements
• Build and enhance a mature data protection culture
• Join a collaborative and supportive environment with hybrid working flexibility 📩 Apply now or contact bethany.machon@lhh.com directly for a confidential discussion.