Legal Data Protection Executive (GDPR)

3 days in Office - Birmingham

Most data protection roles sit inside compliance teams where you implement policy written by someone else. This one is different. You will be advising clients, reviewing substantive documents, and carrying real responsibility from day one inside a specialist law firm practice with a dedicated DP team and a department leader who is invested in your growth. If you are serious about building a career in data protection and information governance, this is the environment that develops it properly.

What you will be doing:

• Managing Data Subject Access Requests end to end, reviewing large volumes of documents, applying redactions to the required legal standard.
• Reviewing DPIAs and identifying risks, gaps and issues with clear, reasoned commentary for clients.
• Reviewing Data Processing Agreements, spotting missing provisions, flagging data protection risks and escalating concerns to senior colleagues.
• Supporting the wider team on information governance, compliance and routine advisory matters as required.

Applicants will have:

• Solid working knowledge of GDPR and UK data protection law; you don't need to be a qualified solicitor, but you must be able to apply the framework in practice.
• A genuine understanding of data protection risk and compliance concepts, even if developed under supervision.
• Baseline awareness of how cyber security intersects with DP and information governance obligations.
• Demonstrable experience handling sensitive and confidential information to a high standard.
• Exceptional attention to detail, particularly in document review and redaction. This is non-negotiable.
• Strong written and verbal communication, with the ability to articulate issues clearly to both clients and colleagues.
• The ability to manage competing deadlines without letting accuracy slip.