IMS Systems and Data Protection Lead

📢 We're hiring: IMS Systems & Data Protection Lead 📍 Hybrid – London or Blackburn | 3 days per week in the office We're looking for an experienced Data Protection & Compliance Officer to join Maintel and take ownership of our integrated compliance, governance and data protection framework. Reporting directly to the Chief Financial Officer, this is a broad and influential role for someone who enjoys working across the business, translating complex regulatory requirements into practical solutions and ensuring we remain audit-ready, compliant and continually improving. What you'll be responsible for:

• Acting as our Data Protection Officer (DPO) and providing expert guidance across UK GDPR, Data Protection Act 2018 and PECR
• Leading and continually improving our Integrated Management System (IMS)
• Maintaining multiple ISO certifications, including ISO 9001, 14001, 45001, 22301, 27001, 27701 and 42001
• Coordinating internal and external audits, certification activity and corrective actions
• Managing compliance across Cyber Essentials, Cyber Essentials Plus, PCI-DSS and NHS-DSP
• Overseeing DPIAs, data subject rights, privacy governance, breach management and records of processing
• Leading operational risk management and governance reporting
• Supporting supplier assurance and customer compliance requirements
• Producing compliance dashboards, KPIs and reporting for senior leadership
• Supporting environmental and sustainability compliance, including SECR, ESOS, CDP and Net Zero initiatives
• Managing and developing one team member What we're looking for: You'll have strong experience managing an Integrated Management System and maintaining multiple ISO certifications, alongside hands-on experience of audit, governance, risk and regulatory compliance. Crucially, you'll also bring strong data protection governance experience, including DPO responsibilities, DPIAs, data subject rights, privacy notices, records of processing activities and personal data breach processes. An ISO Internal Auditor or Lead Auditor qualification and a Data Protection Practitioner/DPO qualification would be advantageous. This is a great opportunity for someone who wants genuine ownership of a varied compliance function and the opportunity to work closely with senior stakeholders across the organisation. Interested? Apply via the link or get in touch with me directly to find out more.