Search Jobs
Data Governance Lead
Lynton House, 7-12 Tavistock Square London, Greater London E14 GB
Job Description
Location: Central London
Full-time, permanent
Role Summary
An established organisation in the life sciences sector is seeking a seasoned professional to lead its data governance and privacy strategy. This individual will serve as the designated Data Protection Officer (DPO) and Caldicott Guardian, ensuring the organisation adheres to all relevant data protection laws and standards, including UK GDPR and the Data Protection Act 2018.
The role involves advising internal teams, overseeing compliance activities, and acting as the primary liaison with regulatory bodies. The successful candidate will also support certification efforts across ISO standards and collaborate with cross-functional teams to embed a strong data governance culture.
Key Responsibilities
- Provide expert guidance on data protection and information security obligations across the organisation.
- Monitor and enforce compliance with data protection legislation and internal governance frameworks.
- Maintain and evolve data protection policies and documentation.
- Deliver training and awareness programmes to ensure staff understand their responsibilities.
- Support teams in conducting and reviewing Data Protection Impact Assessments (DPIAs).
- Lead incident response efforts related to data breaches, including reporting and post-event analysis.
- Serve as the main point of contact for regulatory authorities and manage responses to inspections or inquiries.
- Oversee the handling of data subject rights requests in line with legal requirements.
- Ensure all records and documentation related to data processing are accurate and up to date.
- Represent the organisation in external collaborations, ensuring data protection requirements are clearly defined and upheld.
Required Experience
- Proven track record as a nominated Data Protection Officer within a UK-based organisation.
- Strong understanding of UK GDPR, the Data Protection Act 2018, and related regulatory frameworks.
- Experience leading ISO27001 and ISO9001 certification processes.
- Familiarity with data protection practices in sectors such as healthcare, clinical research, or non-profit.
- Understanding of how information security standards intersect with privacy obligations.
- Comfortable engaging with regulatory bodies and managing compliance programmes.
- Ability to work collaboratively across departments including legal, HR, IT, and research.
- Technological awareness to understand data flows, systems, and associated risks.
Education & Certifications
- Degree-level education in Law, Data Governance, Information Security, or a related discipline.
- Desirable: Professional certifications such as CIPP/E, CIPM, CISSP, or CISM.
Core Competencies
- High ethical standards and ability to operate independently.
- Strong attention to detail and accuracy in documentation.
- Excellent communication skills, with the ability to simplify complex topics.
- Analytical mindset with strong problem-solving capabilities.
- Effective project and time management skills.
- Discretion and resilience when handling sensitive information.
- Ability to influence and collaborate across diverse teams.
Equal Opportunity Employer: We are proud to be an equal opportunity employer. We welcome and encourage applications from all qualified candidates regardless of race, sex, gender identity or expression, disability, age, religion or belief, sexual orientation, or any other characteristic protected by applicable laws and regulations. It is our policy not to discriminate against any applicant or employee, and we are committed to fostering a diverse, inclusive, and respectful work environment across all locations in which we operate. We believe that diversity, equity, and inclusion are fundamental to our mission and enhance our ability to serve clients globally. If you have a disability or require any reasonable accommodations during the application or interview process, please inform your recruiter or contact us directly so that we can explore the appropriate arrangements.
Fraud Alert: Candidate safety is a top priority at Planet Pharma. The industry has seen an increase in people falsely representing themselves as recruiters to gather personal information from job seekers. For your safety, do not provide sensitive data to anyone you have not spoken with thoroughly, never provide banking information during the application process and always double check the email address of the Recruiter to ensure it’s from an official Planet Pharma domain (@planet-pharma.com, @planet-pharma.co.uk, and @ppgadvisorypartners.com) and not a domain with an alternative extension like .net, .org or .jobs.
Share This Job:
Related Jobs:
Are you sure you want to apply for this job?
Please take a moment to verify your personal information and resume are up-to-date before you apply.