Data Protection Officer

Adler & Allan is a leading environmental services business, helping organisations reduce environmental risk and achieve their commercial, ESG and Net Zero goals. From responding to environmental incidents to delivering long-term environmental solutions, we play a critical role in protecting people, property and the environment.

As our business continues to grow, we are looking for a Data Protection Officer (DPO) to join our team and lead data protection compliance across the Group.

Reporting to the Legal Counsel, you will be responsible for overseeing data protection compliance across the business, ensuring we meet our legal obligations while supporting operational and commercial objectives.

You will act as the business's subject matter expert on data privacy, providing practical advice, driving compliance initiatives and building awareness across the organisation.

Why Join Adler & Allan?

This is an opportunity to join a growing organisation where you can make a genuine impact. You'll work closely with Legal and senior leadership teams, helping to shape and strengthen data protection practices across the Group while supporting a business that plays a vital role in environmental protection and sustainability.

If you're looking for a role where you can take ownership, influence change and develop your career within a growing business, we'd like to hear from you.

Responsibilities

Lead and manage data protection compliance across the Group.; Ensure compliance with GDPR, PECR and other relevant data protection legislation.; Manage and respond to Subject Access Requests (SARs).; Conduct Data Protection Impact Assessments (DPIAs).; Deliver training and guidance to stakeholders across the business.; Manage supplier compliance with data protection requirements.; Conduct regular audits and privacy risk assessments.; Support the management and reporting of data protection incidents and breaches.; Maintain SAR, incident and compliance registers.; Produce reports and compliance updates for senior stakeholders.; Act as the key point of contact for the Information Commissioner's Office (ICO).

Requirements

Proven experience in a Data Protection, Privacy or Compliance role.; Strong knowledge of GDPR, PECR and UK data protection legislation.; Experience conducting privacy audits, risk assessments and DPIAs.; Experience managing Subject Access Requests and data-related incidents.; Strong stakeholder management and communication skills.; A practical, commercial approach to compliance.; Excellent organisational skills and attention to detail.; The ability to build effective relationships across all levels of the business.