Data Protection Officer in Harefield

We do what we say and we care! That’s why we need people like you, who take pride in doing things properly, giving clear advice and helping a busy business make good decisions. We have a new opportunity for a Data Protection Officer to join Clancy. This is a standalone senior specialist role for someone who can advise at Board level, challenge with confidence and still personally own the detail. Operating independently, without a team to delegate work to, you'll combine strategic influence with hands‑on delivery across all aspects of data protection.

This is an important role for us. You'll lead and maintain Clancy’s data protection framework, helping the business meet its obligations under UK GDPR, the Data Protection Act 2018 and wider privacy requirements. You'll provide objective advice, challenge and assurance to senior management and the Board, while also personally managing the day‑to‑day data protection activity that keeps the business compliant and well controlled. You'll be the main point of contact for data protection matters across the business, working with employees, senior leaders, clients, suppliers and, where required, regulatory authorities. Just as importantly, you'll help make data protection practical, understandable and embedded in how we work every day.

Here’s some of the activities that you’ll be involved in:

• Leading, maintaining and improving our data protection framework, including policies, processes, controls and guidance.
• Providing clear advice, challenge and reporting to senior management and the Board on compliance, risk, priorities and actions.
• Managing data breaches and incidents, including investigation, escalation, regulatory assessment, reporting and follow‑up actions.
• Overseeing data subject rights activity, including DSARs, erasure requests, privacy notices and related records.
• Supporting and maintaining records such as the Record of Processing Activities, retention schedules and data processing records.
• Advising on DPIAs, LIAs and privacy by design for new projects, systems, suppliers and ways of working.
• Reviewing data protection requirements in commercial contracts, supplier questionnaires, client questionnaires and data processing agreements.
• Delivering training, awareness activity and practical guidance to help colleagues understand their responsibilities.
• Carrying out audits, compliance reviews and risk assessments, making sure findings are tracked and followed through.
• Keeping up to date with changes in legislation and regulatory guidance, then translating that into clear, proportionate business action.

We would love to hear from you if you can demonstrate:

• You have substantial experience in data protection, privacy, compliance, legal, audit or risk, with accountability for advising on data protection matters.
• You’ll need strong working knowledge of UK GDPR, the Data Protection Act 2018 and practical data protection compliance requirements.
• You’ll be confident advising senior stakeholders and giving clear, well‑judged recommendations on compliance, governance and risk.
• This role needs someone who can communicate clearly with different audiences, challenge constructively and build trust across a complex business.
• You’ll also need hands‑on experience across the core data protection landscape, including breaches, DSARs, DPIAs, LIAs, RoPA, privacy notices, policies, audits and risk activity.
• Experience working as a standalone DPO or data protection lead in a multi‑site or group environment would be a real advantage.
• A relevant professional qualification, training or equivalent experience in data protection, privacy, compliance, legal, audit or risk management is essential.
• A recognised qualification such as CIPP/E, CIPM, Practitioner Certificate in Data Protection or equivalent would be desirable.
• Above all, you’ll be practical, organised and solutions‑focused.
• You’ll be comfortable operating independently, without a direct team around you, and able to balance legal and compliance requirements with the realities of a busy operational business.
• A full UK driving licence is required.

Our Company: Every day we work smarter, greener and use our imaginations. Our purpose at Clancy is simple – we make life better for everyone’s growing families. We play a vital role in providing fresh drinking water and power to millions of homes and businesses and so much more. We are one of the biggest family‑owned construction businesses in the UK and we care about our people, our clients and the environment.

Benefits: In addition to helping you reach your career goals, a competitive salary, pension, healthcare and holiday allowance starting at 22 – 26 days per annum, we also offer perks including Clancy Xtras, our employee benefits programme with discounts for numerous well‑known retailers such as Tesco, Sainsbury’s, Currys PC World and Vue Cinemas, cycle to work scheme as well as an Employee Assistance Programme.

Clancy is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all our employees. If you require any reasonable adjustments to be made for you to attend an interview, please do let us know and we will be happy to accommodate. We are proud signatories of the Armed Forces Covenant and Disability Confident Committed. Proud member of the Disability Confident employer scheme.