Data Protection Specialist

Data Protection Specialist – Grade 7 £49,452 - £62,699+ benefits & highly flexible working (London, Glasgow or Cardiff)

Please note this role is subject to Security Clearance (SC)

Across government, digital and technology transformation is no longer simply an enabling function; it is central to how public bodies deliver better services, protect resilience, support policy outcomes and respond to the growing expectations of citizens, businesses and colleagues. Ofgem has a vital role in the UK’s energy system, protecting consumers and helping to enable a more secure, fair and sustainable energy future. As the organisation continues to evolve, our newly designed Digital, Data and Security Services (DDSS) team will be critical to how Ofgem modernises its services, strengthens its platforms and supports wider government priorities

Ofgem is on an exciting transformational journey. Within DDSS, we are strengthening the foundations of both our entire function and all elements of our DDSS estate, building greater internal capability and creating the platforms, services and governance needed to support a modern regulator. In short, this is an opportunity to join Ofgem at a pivotal moment and help shape the next stage of its digital, data, security, and technology maturity.

About the role

Ofgem is seeking a highly capable and motivated Data Protection Specialist (Deputy Data Protection Officer) to play a critical role in safeguarding one of the UK’s most sensitive and complex data environments.

This role will be a senior specialist role working at the heart of Ofgem’s legal and regulatory framework, providing expert advice, overseeing data protection compliance and acting as a key interface across the organisation. You will not only have the opportunity to build your own focused and high performing team, but excel in operating in a fast paced, high demand regulatory environment. Your skills will support the DPO and senior security leadership, while engaging widely across business units, legal teams, delivery functions and government stakeholders.

Key responsibilities will include:

Legal & Advisory

• Provide expert legal advice on data protection matters across Ofgem, ensuring compliance with UK GDPR, Data Protection Act and related legislation
• Represent the organisation in handling legal and regulatory queries, including engagement with the Information Commissioner’s Office (ICO)
• Support preparation of submissions, reports, and returns to the Cabinet Office and central government bodies

Data Protection & Compliance Oversight

• Lead and support on data protection compliance activities, including:
• Data Protection Impact Assessments (DPIAs)
• Records of Processing Activities (ROPA), including re-establishing and delivering the annual return
• Oversight of data sharing agreements and compliance frameworks
• Ensure robust governance around highly sensitive datasets, including pricing and market sensitive information

Incident & Risk Management

• Oversee and advise on data breach management
• Support incident response and reporting, ensuring appropriate escalation and regulatory compliance
• Work closely with security teams to ensure alignment with risk mitigation strategies

Freedom of Information & Subject Access Requests

• Provide legal oversight and guidance on FOI requests and Subject Access Requests
• (SARs)Collaborate with FOI teams to ensure responses meet statutory requirements and timelines

Cross Organisation Collaboration

• Operate in a matrix management environment, working with:
• Project Managers and Senior Responsible Owners (SROs)
• Security Architects, Security Managers and Business Continuity teams
• Delivery, corporate services and business owners
• Provide input into project delivery to ensure privacy by design and compliance from the outset

Governance & Sign-Off

• Support the DPO and Deputy CISO in preparing materials for formal sign off and assurance processes
• Contribute to organisational policies and frameworks relating to data protection, AI and emerging technologies

What we are looking for

We’re looking for a highly analytical and resilient professional who thrives in a complex, high-volume regulatory setting. With a legal background (Law degree or equivalent experience), with the ability to interpret and apply data protection legislation. With strong experience in data protection, compliance or information governance.The role requires strong independence, sound judgement and the ability to influence where no two days are the same, ranging from legal advisory and governance work to urgent incident response and high-profile FOI cases.

This is an opportunity to play a significant role in Ofgem’s journey, as part of a newly formed and high performing team that is shaping a critical government organisation at a time when its work has never been more important.

If you are interested in applying for this vacancy, please reach out to Lauren O’Brien on 0208 2531806, or via email at Ofgem-DPS@global-resourcing.com Government or wider public sector experience would be beneficial but is not essential.