Security Governance, Risk and Compliance Specialist - Privacy

Job Description

Privacy & Data Protection Specialist – 12 Month FTC

Overview

Leads compliance with all relevant data protection regulations and standards, playing a critical part in safeguarding sensitive information, identifying potential risks, and executing on actions to mitigate them. Working closely with various departments in the identification and mitigation of privacy risk.

Location

Commutable distance to London / Winchester

What's in it for you

• Up to £65,000
• 10% bonus
• Work Life Smarter – our commitment to a flexible and hybrid working culture
• Generous pension scheme starting at 6% rising to 10%
• A unique wellbeing programme that looks after the whole you
• Access to multiple learning platforms to support your individual development
• Active and diverse networks that build community, support wellbeing and advocate for change
• A comprehensive set of benefits including discounts on big brands, gymflex memberships and paid volunteering leave

Plus, you’ll play an integral role in protecting the commercial value of Arqiva’s sites – a critical part of how we deliver for our customers.

What You’ll Be Doing

• Support the implementation of IS and cyber security policies and ensure adherence to regulations.
• Monitor and ensure compliance with data protection laws and regulations (e.g., UK GDPR, Privacy Electronic Communication Regulations).
• Conduct privacy impact assessments and data protection audits.
• Develop and implement data privacy policies and procedures.
• Provide training and guidance to employees on data privacy best practices.
• Collaborate with IT and legal teams to address data security concerns.
• Respond to data subject access requests and other privacy‑related enquiries.
• Stay informed about changes in data privacy legislation and update policies accordingly.
• Investigate and report data breaches in compliance with legal requirements.
• Contribute to the development of strategy and implement controls to strengthen privacy within the organisation.

What We’re Looking For

• Cyber security proficiency in cyber security tools and technologies.
• Cyber advisory knowledge of cyber best practice and advisory skills.
• Cyber incident management ability to identify and respond to cyber security incidents.
• Understanding of security principles and practices.
• Knowledge of information security management frameworks, governance standards and regulatory/legislative compliance (e.g., GDPR, ISO 27001).
• Risk management and QA ability to identify and mitigate potential risks, and implement quality control processes.
• Communication skills – collaborate with cross‑functional teams, present technical info and provide training or support.
• Analytical and technical problem‑solving skills to diagnose and resolve technical issues.
• Innovation and CI – drive innovation and continuous improvement.
• Relationship management – foster relationships with external vendors, suppliers, industry peers.

Knowledge & Experience

• Strong knowledge of data protection laws such as GDPR and PECR.
• Experience conducting privacy impact assessments and audits.
• Knowledge of security standards and industry best practices.
• In‑depth knowledge of legislation applicable to the role.

If you’re unsure whether you meet every requirement, don’t let that hold you back – your experience may be exactly what we’re looking for.

Qualifications

A degree (or equivalent experience) in Computer Science, Information Systems, Cyber Security, or related field is advantageous. Relevant certifications such as CIPP/E, CIPM, or CIPT are a plus.