Deputy Data Protection Officer in Leeds

We are seeking an experienced privacy professional to become the number two in the group data protection function of a member-owned, not-for-profit organisation with an international footprint. This is an unusual opportunity for someone who wants standing at the most senior tables rather than proximity to them.

Our client operates in a tightly regulated environment where the confidential handling of highly sensitive personal data is not a back-office obligation. It is the foundation of the trust their members place in them, which is why this role sits where it does.

Reporting to the Group Data Protection Officer, you will own the privacy risk agenda day to day, advise the business independently, and deputise for the Group DPO at Board and Executive level and with the ICO and equivalent supervisory authorities in the other markets the organisation serves.

You will provide expert data protection leadership across the organisation, including:

• Acting as subject matter expert on UK GDPR, PECR and EU GDPR, providing clear and independent advice to colleagues at every level.
• Leading delivery of the data protection strategy across systems, processes and third party relationships.
• Overseeing and advising on DPIAs, LIAs, RoPAs and consent assessments.
• Running data incident and breach investigations end to end, including remedial actions and lessons learned.
• Reviewing and advising on data protection clauses in commercial contracts and supplier agreements.
• Producing reports, trends and insights to inform senior committees on the compliance position.
• Supporting data subject rights requests and ensuring fair outcomes within statutory timescales.
• Building privacy capability across the organisation through training, awareness and coaching.
• Deputising for the Group DPO with the ICO and equivalent regulators in other jurisdictions.

• Strong working knowledge of UK GDPR, PECR and EU GDPR.
• Experience gained in a data protection, compliance or governance role.
• Credible with senior stakeholders, with the confidence to hold a position and give unwelcome advice at Board and Executive level.
• Hands-on as well as strategic. You are comfortable drafting the assessment, not only reviewing someone else’s.
• Exposure to privacy regimes beyond the UK and EU is an advantage, as is a recognised data protection qualification (GDPR-P, CDPSE, CIPP/E).
• A legal qualification is welcome but genuinely not required.
• Organised, detail-oriented and calm when several things need your attention at once.

• Competitive salary aligned with experience.
• Discretionary bonus, 10% on target and up to 20% based on performance.
• Employer pension contribution of up to 11%.
• Private medical insurance.
• 25 days annual leave, flexible bank holidays and the option to purchase additional days.
• Life assurance and a salary sacrifice car scheme.
• Flexible hours and hybrid working, with two days a week in the Leeds office.
• A culture that takes wellbeing and inclusion seriously rather than decoratively.

Three stages, so you know what to expect:

• A screening call with LHH. Your CV is then submitted to our client alongside short written answers to a small number of questions they have set.
• First interview with the Group Data Protection Officer and colleagues.
• Second interview, including a short presentation against a brief shared in advance and an assessment reviewing a sample contract and its data protection clauses.

This search is being handled exclusively by LHH. Our client is not named at this stage; we will discuss the organisation in full on an initial call, and no details are shared with them without your consent.

For a confidential conversation and the full candidate pack, contact Sam Fryer at or 07703 355559.