Compliance and Data Protection Officer

@ Footasylum

Compliance and Data Protection Officer

Footasylum is seeking a standalone Compliance and Data Protection Officer to ensure adherence to legal standards, internal policies, and data protection regulations such as GDPR and other applicable privacy laws.

Compliance Management Responsibilities

• Develop, implement, and maintain Footasylum’s compliance framework, policies, and procedures.
• Monitor and report on compliance risks, breaches, and regulatory developments.
• Conduct internal audits and risk assessments to ensure legal and regulatory adherence.
• Provide training and guidance to staff on compliance-related matters.
• Liaise with regulatory bodies and manage responses to compliance inquiries or investigations.

Data Protection Officer (DPO) Responsibilities

• Serve as the primary point of contact for data protection authorities and data subjects.
• Monitor compliance with data protection laws and internal policies.
• Advise on Data Protection Impact Assessments (DPIAs) and privacy-by-design practices.
• Maintain records of processing activities (RoPA) and oversee data breach response protocols.
• Conduct regular privacy audits and risk assessments.
• Collaborate with IT, HR, Legal, and other departments to ensure data protection compliance.
• Review all third party DPA contract clauses to ensure regulatory alignment.

About You

We are looking for a candidate with strong knowledge of GDPR, UK Data Protection Act 2018, PECR, and other relevant privacy laws. You should have proven experience in developing and implementing compliance frameworks, excellent risk assessment skills and be comfortable with stakeholder management. Proficiency with compliance tools and MS Office is required. Desirable skills include experience with ISO 27001, privacy-by-design, DPIAs, and contract review.

Diversity

At Footasylum, diversity is valued and essential. We believe different perspectives help build innovative, accessible products and a happy, collaborative team.

Recruitment Process

The interview process is transparent and stress-free. Applications are reviewed individually, followed by an informal call or Teams chat to assess fit. This role is not remote and requires a hybrid presence at our Head Office in Greater Manchester.

Key skills/competency

Compliance, Data Protection, GDPR, Risk Assessment, Internal Audit, DPO, Policies, Regulatory, Stakeholder, ISO 27001