Data Protection Officer

Data Protection Officer – (Job Ref: 26N/DPOR)
​​​​​​​
Randox is seeking an experienced Data Protection Officer to hold the Group's standalone Data Protection Officer function and independently oversee data protection compliance. The role covers high-volume health, genetic, customer and employee data and supports operations in more than 135 countries. The postholder will have sole day-to-day responsibility for the Data Protection Officer function.

Location: Randox Laboratories, 55 Diamond Road, Crumlin, BT29 4QY.

Contract Offered: Full-time, Permanent

Working Hours / Shifts: 40 hours per week. Monday to Friday 8.40am to 5.20pm or 4x 9 hour days Monday to Thursday with a 4- hour day on a Friday. TBC.

Right to Work Requirement

Please note that this role requires candidates to have the legal right to work in the UK for a minimum of 12 months from the application date. This is to ensure completion of our 9-month probationary period and for any potential sponsorship decisions to be considered. Unfortunately, we are unable to offer visa sponsorship at the point of hire.

What does the Data Protection Officer role involve?

This is a standalone role. The postholder will work directly with senior management and collaborate with the in-house legal, Information Security, IT, Quality, HR, Clinical Governance, Marketing and operational teams, but the Data Protection Officer responsibilities will remain with this post. The role will provide privacy-by-design input into digital services, artificial intelligence, international expansion and other strategic projects.
The postholder will be responsible for:

• Advising senior management and business teams on UK and international privacy requirements;
• Maintaining the record of processing activities, data protection risk register and breach log;
• Leading data protection impact and legitimate interests’ assessments;
• Overseeing privacy notices, retention, data subject rights, processor contracts and international transfers;
• Assessing incidents and manage regulatory notifications and correspondence;
• Monitoring suppliers and key projects; and deliver practical training and guidance.

Who can apply?

Essential criteria:

• Strong working knowledge of UK data protection law and regulatory guidance.
• Substantial practical experience in a Data Protection Officer, privacy counsel or senior privacy role. Experience of sensitive health or similarly high-risk data.
• Proven ability to manage incidents, rights requests, impact assessments, processor agreements, international transfers and regulator engagement.
• Ability to give clear, independent and commercially practical advice, challenge constructively and communicate with senior leaders and non-specialists.
• Excellent judgement, integrity, organisation and drafting skills, with the ability to prioritise competing deadlines.
• Recognised data protection qualification or equivalent depth of relevant experience.

Desirable:

• CIPP/E or comparable professional certification.
• Experience in diagnostics, healthcare, life sciences or a regulated consumer business.
• Experience of multi-jurisdictional privacy programmes and international expansion.
• Familiarity with information security standards, including ISO 27001, and artificial intelligence governance.
• Experience building practical governance frameworks, policies, training and reporting for senior management