Senior Data Protection Specialist

Senior Data Protection Specialist

Posted 2 weeks ago by The Curve Group

Negotiable
Inside
Hybrid
London Area, United Kingdom

Summary: The role of Senior Data Protection and InfoSec Consultant involves leading privacy and information security governance within a regulated organization. This strategic, hands-on position requires expertise in compliance, technical insight, and collaboration across various functions. The consultant will be responsible for data protection assessments, incident management, and aligning security practices with regulatory standards. The position is hybrid, requiring in-office presence for 2-3 days a week over a 6-month contract period, classified as inside IR35.

Key Responsibilities:

  • Own and lead DPIAs, ROPAs, and privacy risk assessments
  • Oversee data breach response and support incident management
  • Align GDPR, DPA18, and ISO27001 standards across security and privacy practices
  • Embed privacy-by-design principles into systems, platforms, and processes
  • Guide data governance for cloud, analytics, and emerging tech such as AI
  • Collaborate with cross-functional teams across data, tech, legal, and risk
  • Raise awareness through training and promote a strong data protection culture

Key Skills:

  • Expert knowledge of data protection laws and information security frameworks
  • Strong experience in a privacy or data protection leadership role
  • Ability to work across disciplines and influence at senior levels
  • Comfortable advising on governance and risk in cloud and AI/data environments
  • Previous work in a regulated or financial services setting is desirable

Salary (Rate): undetermined

City: London Area

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: Senior

Industry: Other

Detailed Description From Employer:

6 month contract - inside IR35 Hybrid - an expectation of 2/3 days a week in the office.

Senior Data Protection and InfoSec Consultant

Are you passionate about data protection and information security? Do you thrive on helping organisations meet regulatory obligations while enabling innovation?

An established, regulated organisation is looking for a Senior Data Protection and Infosec Consultant to lead its privacy and information security governance. This is a strategic, hands-on role combining compliance expertise, technical insight, and cross-functional collaboration.

In this role, you’ll:

  • Own and lead DPIAs, ROPAs, and privacy risk assessments
  • Oversee data breach response and support incident management
  • Align GDPR, DPA18, and ISO27001 standards across security and privacy practices
  • Embed privacy-by-design principles into systems, platforms, and processes
  • Guide data governance for cloud, analytics, and emerging tech such as AI
  • Collaborate with cross-functional teams across data, tech, legal, and risk
  • Raise awareness through training and promote a strong data protection culture

What we're looking for:

  • Expert knowledge of data protection laws and information security frameworks
  • Strong experience in a privacy or data protection leadership role
  • Ability to work across disciplines and influence at senior levels
  • Comfortable advising on governance and risk in cloud and AI/data environments
  • Previous work in a regulated or financial services setting is desirable

Why this role?

You’ll play a critical role in shaping the organisation’s approach to privacy, data risk, and security at a strategic level. If you're looking to step into a high-impact role where you can influence culture and frameworks — this is it. Apply now to learn more.