Fractional Data Protection Officer

Job Purpose Summary

The Fractional Data Protection Officer will serve as GB Bank's independent expert on data protection. This role involves advising leadership and staff on legal obligations and best practices, overseeing the organization's data privacy approach, ensuring effective risk management, and acting as the primary contact for regulators and data subjects. The position is fractional, anticipating a high initial commitment for improvement, followed by a reduced, ongoing engagement.

Key Responsibilities

• Monitor and ensure compliance with data protection legislation, policies, and procedures.
• Advise management on privacy risks, legal requirements, and emerging regulatory developments.
• Lead or support Data Protection Impact Assessments (DPIAs) for high-risk projects.
• Maintain records of processing activities (ROPA) and oversee data protection documentation.
• Manage data breach responses, including investigations and notifications where required.
• Act as the main point of contact with supervisory authorities.
• Handle data subject requests (e.g., access, erasure, correction).
• Promote awareness of data protection through training and guidance.
• Embed "privacy by design and by default" into new systems, projects, and processes.

Key Role Attributes

GB Bank is seeking an individual experienced in guiding growing organizations on practical conformance to GDPR and data protection law. Candidates should possess practical awareness of modern cloud technology and its use in data protection, along with knowledge of ISO27001 requirements and experience assisting corporate accreditation. The ideal candidate will be able to communicate complex legal considerations to diverse audiences, work independently, influence senior stakeholders, and demonstrate ethical, impartial, and high professional standards.

Professional Qualifications

• Proven experience in a DPO, privacy, compliance, or legal role.
• Strong knowledge of GDPR and data protection principles.
• Experience with DPIAs, data breach management, or privacy governance.
• Relevant certification (e.g., CIPP/E, CIPM, or equivalent) is an advantage.

Key skills/competency

• Data Protection
• GDPR
• Privacy Compliance
• Risk Management
• DPIA
• Data Breach Management
• ISO27001
• Cloud Security
• Legal Advisory
• Stakeholder Communication