1 to 25 of 45 Data Protection Jobs in Scotland

Senior Data Protection Officer Location: Edinburgh, Scotland - Hybrid Working Salary: Up to £85k + benefits Overview: The Global Data Protection Officer (DPO) leads the organisation's data privacy strategy, ensuring compliance with GDPR and other relevant regulations across all professional service operations. The role embeds data protection into daily practices and promotes a … culture of accountability and risk awareness. Key Responsibilities: Oversee global data protection compliance and governance. Maintain and improve data protection frameworks, policies, and records. Conduct risk assessments, DPIAs, and compliance reviews. Manage data incidents and subject access requests. Collaborate with IT, HR, Risk, and Operations on privacy controls. Deliver staff training and promote privacy awareness. … Report on compliance performance and regulatory developments. Experience & Skills: 5+ years' experience in data protection, risk, or compliance within professional services. Strong knowledge of GDPR, UK, and international privacy standards. Skilled in compliance monitoring, incident management, and stakeholder engagement. Excellent communicator with analytical and organisational strengths. Holds a relevant data protection or privacy certification. If you More ❯

We are looking for an individual to take a lead role in our Data Protection team. The team is based in the Glasgow HQ and provides oversight and influence over privacy and data protection of the whole Arnold Clark business and its subsidiaries. We are a mature enterprise with over 12.5k employees, we sell more than … Elgin down to Exeter. We are after an individual who is ready to step up in their current role and lead privacy work at scale, however, support of the Data Protection Officer (DPO) and Chief Information Officer (CISO) will be offered, and a great team is already in place. We offer: • Hybrid working - on average two days per … ...and much more! Hours Full time: Monday - Friday, 37.5 hours per week About the role Reporting to our CISO, you will play a vital role in protecting the personal data in our custody, while helping to provide an excellent service and commercial offering to our customers. You will work closely with colleagues across various functions and businesses in the More ❯

Data Protection Officer Location: Glasgow or Edinburgh (hybrid) We're partnering with a respected Scottish law firm that's genuinely built around people, not process. They've made their name by blending sharp legal minds with a practical, human approach, and their Data Protection team is a big part of that story. They're now looking … for a Data Protection Officer who's as comfortable untangling GDPR complexity as they are chatting with clients about real-world impact. You'll be the go-to expert for a range of organisations, acting as their outsourced DPO and helping them navigate privacy and compliance with confidence. It's a role with visibility, trust, and plenty of … space to shape things your way. What you'll do Be the trusted advisor clients turn to for data protection and privacy guidance. Lead on all things GDPR, from data breaches and audits to policies and training. Build long-term client relationships that feel more like partnerships than projects. Roll up your sleeves with colleagues in commercial More ❯

Data Protection Support Officer 24 Month Contract (Outside IR35) Hybrid, 3-4 days in Edinburgh Starting ASAP Day Rate: 145.20 About the Role You will be supported and managed on a day-to-day basis by the Assistant Data Protection Officer (ADPO). You'll be working closely with a number of teams across the business. … Primary responsibilities will include, but not be limited to, protecting personal data held and processed by the client. Main Duties: Support the ADPO through the completion and maintenance of relevant DP trackers and workflows; Support the ADPO with the development and maintenance of the business's data map and relevant audit procedures; this will include support and guidance … to internal teams; Work with the ADPO to ensure Data Subject Access Requests (SARs) and Erasure requests are managed and responded to in line with statutory timelines, with responsibility for the upkeep of workflows and the record management systems to evidence full life cycle of each SAR; Responsible for the day-to-day management of the Data Protection More ❯

Data Protection Support Officer| 24 Month Contract | (Outside IR35) | Hybrid, 3-4 days in Edinburgh | Starting ASAP Day Rate: 145.20 About the Role You will be supported and managed on a day-to-day basis by the Assistant Data Protection Officer (ADPO). You'll be working closely with a number of teams across the business. … Primary responsibilities will include, but not be limited to, protecting personal data held and processed by the client. Main Duties: Support the ADPO through the completion and maintenance of relevant DP trackers and workflows; Support the ADPO with the development and maintenance of the business's data map and relevant audit procedures; this will include support and guidance … to internal teams; Work with the ADPO to ensure Data Subject Access Requests (SARs) and Erasure requests are managed and responded to in line with statutory timelines, with responsibility for the upkeep of workflows and the record management systems to evidence full life cycle of each SAR; Responsible for the day-to-day management of the Data Protection More ❯

About Smart Data Foundry Smart Data Foundry has a purpose to unlock the power of financial data as a force to improve people’s lives. What we do We enable the research ecosystem to flourish through the provision of research ready real financial data. We create data-driven insights based on real financial data, that … identify areas to inform policy change and enhance regulation. Role Purpose The Data Partner Manager is responsible for proactively establishing and developing existing and new strategic relationships with data partners to maximise data sharing opportunities for social good. This role requires a highly proactive individual who takes initiative in developing partnerships, stakeholder engagement, and ensuring data sharing objectives align with Smart Data Foundry's mission to open financial data for social good through research and insights products. The role is highly collaborative, requiring close partnership with colleagues who engage with external groups across academia, research organisations, and the public sector, as well as internal teams developing data sharing products and managing data More ❯

About Smart Data Foundry Smart Data Foundry has a purpose to unlock the power of financial data as a force to improve people’s lives. What we do We enable the research ecosystem to flourish through the provision of research ready real financial data. We create data-driven insights based on real financial data, that … identify areas to inform policy change and enhance regulation. Role Purpose The Data Partner Manager is responsible for proactively establishing and developing existing and new strategic relationships with data partners to maximise data sharing opportunities for social good. This role requires a highly proactive individual who takes initiative in developing partnerships, stakeholder engagement, and ensuring data sharing objectives align with Smart Data Foundry's mission to open financial data for social good through research and insights products. The role is highly collaborative, requiring close partnership with colleagues who engage with external groups across academia, research organisations, and the public sector, as well as internal teams developing data sharing products and managing data More ❯

About Smart Data Foundry Smart Data Foundry has a purpose to unlock the power of financial data as a force to improve people’s lives. What we do We enable the research ecosystem to flourish through the provision of research ready real financial data. We create data-driven insights based on real financial data, that … identify areas to inform policy change and enhance regulation. Role Purpose The Data Partner Manager is responsible for proactively establishing and developing existing and new strategic relationships with data partners to maximise data sharing opportunities for social good. This role requires a highly proactive individual who takes initiative in developing partnerships, stakeholder engagement, and ensuring data sharing objectives align with Smart Data Foundry's mission to open financial data for social good through research and insights products. The role is highly collaborative, requiring close partnership with colleagues who engage with external groups across academia, research organisations, and the public sector, as well as internal teams developing data sharing products and managing data More ❯

About Smart Data Foundry Smart Data Foundry has a purpose to unlock the power of financial data as a force to improve people’s lives. What we do We enable the research ecosystem to flourish through the provision of research ready real financial data. We create data-driven insights based on real financial data, that … identify areas to inform policy change and enhance regulation. Role Purpose The Data Partner Manager is responsible for proactively establishing and developing existing and new strategic relationships with data partners to maximise data sharing opportunities for social good. This role requires a highly proactive individual who takes initiative in developing partnerships, stakeholder engagement, and ensuring data sharing objectives align with Smart Data Foundry's mission to open financial data for social good through research and insights products. The role is highly collaborative, requiring close partnership with colleagues who engage with external groups across academia, research organisations, and the public sector, as well as internal teams developing data sharing products and managing data More ❯

Information Governance Officer | 6-Month Contract | Inside IR35 | Hybrid Edinburgh (2 days pw) | Start ASAP Day Rate: £216 About the Role Support the Information Governance & Data Protection Officer and Corporate Governance Manager with data protection, records management, and statutory information requests. Act as a key contact for regulators and colleagues, monitor compliance with UK GDPR, FOI … Scotland) Act, and advise on Data Protection Impact Assessments. Contribute to record-keeping policies, manage information risks, and deputise as Data Protection Officer when required. Main Duties Advise teams, Board, volunteers, and clerks on IG compliance. Respond to FOI and Subject Access Requests; handle information enquiries. Assist with incident management, data sharing safeguards, and policy … reports. Deliver IG training and guidance; collaborate with partner organisations. Promote team support and continuous improvement; undertake other duties as needed. Essential Skills & Experience Strong knowledge of UK GDPR, Data Protection Act 2018, FOI (Scotland) Act, Public Records (Scotland) Act. Understanding of confidentiality and IG security principles. Ability to communicate complex information to varied audiences. Evidence of CPD More ❯

Information Governance Officer 6-Month Contract Inside IR35 Hybrid Edinburgh (2 days pw) Start ASAP Day Rate: 216 About the Role Support the Information Governance & Data Protection Officer and Corporate Governance Manager with data protection, records management, and statutory information requests. Act as a key contact for regulators and colleagues, monitor compliance with UK GDPR, FOI … Scotland) Act, and advise on Data Protection Impact Assessments. Contribute to record-keeping policies, manage information risks, and deputise as Data Protection Officer when required. Main Duties Advise teams, Board, volunteers, and clerks on IG compliance. Respond to FOI and Subject Access Requests; handle information enquiries. Assist with incident management, data sharing safeguards, and policy … reports. Deliver IG training and guidance; collaborate with partner organisations. Promote team support and continuous improvement; undertake other duties as needed. Essential Skills & Experience Strong knowledge of UK GDPR, Data Protection Act 2018, FOI (Scotland) Act, Public Records (Scotland) Act. Understanding of confidentiality and IG security principles. Ability to communicate complex information to varied audiences. Evidence of CPD More ❯

Compliance Manager to take our Privacy & AI Compliance function to the next level, leveraging an AI-first approach to ensure we operate at the forefront of best-in-class data protection and responsible AI governance. Sitting at the intersection of legal, security, and business operations, this role is central to safeguarding personal data, strengthening compliance processes, and … embedding privacy & AI best practice across the company. You'll manage a high-performing team, oversee regulatory obligations, and provide strategic and practical advice on privacy, data protection, and AI-related risks. If you're motivated by the challenge of operating in a fast-paced, global organisation, thrive on balancing strategy with hands on problem solving, and want … and mentor a team of privacy professionals, ensuring they deliver effectively against regulatory and business priorities Take an AI first approach to solving privacy and AI compliance challenges Oversee data subject rights requests (DSARs, deletion, and other inquiries), ensuring timely and compliant responses Conduct and review privacy risk assessments, DPIAs, and assurance audits - providing risk based, practical guidance Manage More ❯

guidance to the company's National Team, Board Members, volunteer community, and Clerks on a wide range of information governance issues. This will include supporting the Information Governance and Data Protection Officer in managing information security incidents, ensuring appropriate safeguards are in place for data sharing, and contributing to major projects by integrating information governance considerations. You … For The ideal candidate for the Information Governance Officer role will have a strong track record of working with and understanding relevant information governance legislation, including the UK GDPR, Data Protection Act 2018, Freedom of Information (Scotland) Act 2002, and the Public Records (Scotland) Act 2011. You should also have experience in communicating complex information to a range More ❯

migrations, and ensuring colleagues are able to work securely and effectively. The Role Lead the development and delivery of an IT and digital strategy. Oversee system management, cybersecurity, and data protection compliance. Act as the first point of contact for day-to-day IT support across a 50-person office and remote teams. Manage relationships with MSP. Lead … systems administration. Proven leadership or team management experience. Experience managing projects, budgets, and third-party suppliers. Desirable: Experience of SDM Housing Software. Knowledge of IT governance, cybersecurity frameworks, and data protection compliance (GDPR). Benefits: 25 days annual leave + 15 public holidays Defined contribution pension scheme (up to 12% employer contribution) Health & wellbeing initiatives, including staff health More ❯

migrations, and ensuring colleagues are able to work securely and effectively. The Role Lead the development and delivery of an IT and digital strategy. Oversee system management, cybersecurity, and data protection compliance. Act as the first point of contact for day-to-day IT support across a 50-person office and remote teams. Manage relationships with MSP. Lead … systems administration. Proven leadership or team management experience. Experience managing projects, budgets, and third-party suppliers. Desirable: Experience of SDM Housing Software. Knowledge of IT governance, cybersecurity frameworks, and data protection compliance (GDPR). Benefits: 25 days annual leave + 15 public holidays Defined contribution pension scheme (up to 12% employer contribution) Health & wellbeing initiatives, including staff health More ❯

LMS Support & Data Administrator Glasgow (Office based) (Giffnock) Part-time (26 hours per week) £27,000 + Pension + Healthcare Driving licence and own car essential This innovative, fast-growing client provides digital learning solutions to organisations and individuals within the Maritime industry. Their learning portal delivers structured, high-quality training that fits around the realities of life at … sea. They are a small, agile team that values collaboration, problem-solving, and learner success. Continued growth has resulted in a requirement for a talented LMS Support & Data Administrator. This role involves managing multiple secure learning portalseach tailored to different partner companies. You will ensure learners have the right access, manage user data, support learners with technical queries … Track and analyse learner activity, reporting trends, issues, and opportunities to the management team. Provide friendly and responsive technical support, escalating more complex issues as needed. Ensure all user data is handled securely, in line with data protection policies (e.g. GDPR). Collaborate with the wider team to improve learner communication, support processes, and content delivery. Essential More ❯

VPC networking, and PrivateLink for secure connectivity. Ensure compliance with GDPR/UK GDPR, PCI-DSS, ISO 27001, and sector-specific standards (e.g., NHS DSP Toolkit, HIPAA). Define data retention policies, PIA/DPIA frameworks, and lawful intercept/emergency call handling. DevOps & Automation: Establish CI/CD pipelines for flows, Lambda, Lex bots, and infrastructure using CloudFormation … . Hands-on experience with IaC (CloudFormation/Terraform/CDK) and serverless development (Node.js/Python). Compliance and regulatory Assurance This role requires strict adherence to international data protection laws, financial and healthcare compliance mandates, and cloud security best practices. The architect will be accountable for producing audit-ready documentation, risk assessments, and governance artefacts for More ❯

VPC networking, and PrivateLink for secure connectivity. Ensure compliance with GDPR/UK GDPR, PCI-DSS, ISO 27001, and sector-specific standards (e.g., NHS DSP Toolkit, HIPAA). Define data retention policies, PIA/DPIA frameworks, and lawful intercept/emergency call handling. DevOps & Automation Establish CI/CD pipelines for flows, Lambda, Lex bots, and infrastructure using CloudFormation … improvements in CSAT/NPS, and reduced AHT. Full migration from legacy platforms within agreed timelines and governance frameworks. Compliance & Regulatory Assurance This role requires strict adherence to international data protection laws, financial and healthcare compliance mandates, and cloud security best practices. The architect will be accountable for producing audit-ready documentation, risk assessments, and governance artefacts for More ❯

VPC networking, and PrivateLink for secure connectivity. Ensure compliance with GDPR/UK GDPR, PCI-DSS, ISO 27001, and sector-specific standards (e.g., NHS DSP Toolkit, HIPAA). Define data retention policies, PIA/DPIA frameworks, and lawful intercept/emergency call handling. DevOps & Automation Establish CI/CD pipelines for flows, Lambda, Lex bots, and infrastructure using CloudFormation … improvements in CSAT/NPS, and reduced AHT. Full migration from legacy platforms within agreed timelines and governance frameworks. Compliance & Regulatory Assurance This role requires strict adherence to international data protection laws, financial and healthcare compliance mandates, and cloud security best practices. The architect will be accountable for producing audit-ready documentation, risk assessments, and governance artefacts for More ❯

VPC networking, and PrivateLink for secure connectivity. Ensure compliance with GDPR/UK GDPR, PCI-DSS, ISO 27001, and sector-specific standards (e.g., NHS DSP Toolkit, HIPAA). Define data retention policies, PIA/DPIA frameworks, and lawful intercept/emergency call handling. DevOps & Automation Establish CI/CD pipelines for flows, Lambda, Lex bots, and infrastructure using CloudFormation … improvements in CSAT/NPS, and reduced AHT. Full migration from legacy platforms within agreed timelines and governance frameworks. Compliance & Regulatory Assurance This role requires strict adherence to international data protection laws, financial and healthcare compliance mandates, and cloud security best practices. The architect will be accountable for producing audit-ready documentation, risk assessments, and governance artefacts for More ❯

Glue, Athena ✅ Security, Compliance & Governance Implement IAM, KMS, VPC, PrivateLink, encryption & secure networking Ensure adherence to GDPR/UK GDPR, PCI-DSS, ISO 27001 Own PIA/DPIA processes, data retention, emergency calling support ✅ DevOps & Automation Establish CI/CD (CloudFormation/Terraform/CDK) Shift-left testing, versioning and automation for flows & Lambda ✅ Operational Excellence & Leadership Define KPIs … Legacy platform retirement within program timelines Strict Regulatory Scope This role requires adherence to international privacy & cloud security mandates. Candidates must demonstrate experience producing audit-ready architecture artefacts and data protection compliance frameworks. More ❯

Glue, Athena ✅ Security, Compliance & Governance Implement IAM, KMS, VPC, PrivateLink, encryption & secure networking Ensure adherence to GDPR/UK GDPR, PCI-DSS, ISO 27001 Own PIA/DPIA processes, data retention, emergency calling support ✅ DevOps & Automation Establish CI/CD (CloudFormation/Terraform/CDK) Shift-left testing, versioning and automation for flows & Lambda ✅ Operational Excellence & Leadership Define KPIs … Legacy platform retirement within program timelines Strict Regulatory Scope This role requires adherence to international privacy & cloud security mandates. Candidates must demonstrate experience producing audit-ready architecture artefacts and data protection compliance frameworks. More ❯

Glue, Athena ✅ Security, Compliance & Governance Implement IAM, KMS, VPC, PrivateLink, encryption & secure networking Ensure adherence to GDPR/UK GDPR, PCI-DSS, ISO 27001 Own PIA/DPIA processes, data retention, emergency calling support ✅ DevOps & Automation Establish CI/CD (CloudFormation/Terraform/CDK) Shift-left testing, versioning and automation for flows & Lambda ✅ Operational Excellence & Leadership Define KPIs … Legacy platform retirement within program timelines Strict Regulatory Scope This role requires adherence to international privacy & cloud security mandates. Candidates must demonstrate experience producing audit-ready architecture artefacts and data protection compliance frameworks. More ❯

VPC networking, and PrivateLink for secure connectivity. Ensure compliance with GDPR/UK GDPR, PCI-DSS, ISO 27001, and sector-specific standards (e.g., NHS DSP Toolkit, HIPAA). Define data retention policies, PIA/DPIA frameworks, and lawful intercept/emergency call handling. DevOps & Automation Establish CI/CD pipelines for flows, Lambda, Lex bots, and infrastructure using CloudFormation … improvements in CSAT/NPS, and reduced AHT. Full migration from legacy platforms within agreed timelines and governance frameworks. Compliance & Regulatory Assurance This role requires strict adherence to international data protection laws, financial and healthcare compliance mandates, and cloud security best practices. The architect will be accountable for producing audit-ready documentation, risk assessments, and governance artefacts for More ❯

workshops, interviews, and other techniques to elicit requirements and drive consensus. Maintain documentation including process maps, user stories, functional specifications, and business cases. Ensure solutions align with regulatory requirements, data protection standards, and internal governance. Requirements: Essential: Proven experience as a Business Analyst of 1-3 years. Proven ability to work across a diverse range of business areas More ❯