Job description
Job Description: Mastar Limited is hiring a Data Privacy Officer (DPO) on behalf of a fast-scaling, data-driven organization in the Fin. Tech and Healthcare Technology space. This role is critical in ensuring full compliance with global privacy laws (including GDPR, UK DPA, and HIPAA), leading data protection strategies, and acting as the key point of contact for regulatory authorities and internal stakeholders.
Key Responsibilities
Lead the company’s data protection and privacy compliance programs. Monitor and ensure compliance with GDPR, UK Data Protection Act, HIPAA, and other relevant regulations. Conduct Data Protection Impact Assessments (DPIAs) and audits across departments. Serve as the primary contact for data subjects, supervisory authorities, and internal teams on privacy-related matters.
Advise executive leadership on legal risks related to personal data use, data sharing, and retention policies. Develop and deliver employee training on data privacy best practices. Maintain records of data processing activities (RoPA). Collaborate with legal, IT, and security teams to mitigate risk and improve privacy governance.
Requirements
In-depth knowledge of GDPR, UK DPA, e. Privacy Regulation, and global privacy frameworks. Experience in conducting DPIAs, internal audits, and managing DSARs. Strong communication skills with the ability to engage legal and non-legal stakeholders. Familiarity with ISO 27001, NIST, or similar security standards. Ability to draft and review privacy policies, contractual clauses, and impact assessments.
Desired Skills: Certifications such as CIPP/E, CIPM, or equivalent. Experience in regulated sectors like Fin. Tech, Healthcare, or Biotechnology. Background in legal advisory, compliance, or data ethics. Working knowledge of data security tools and access management protocols.
Benefits
Competitive salary & annual performance bonus Private medical insurance 28 days holiday + public holidays Hybrid/flexible work model Learning & development budget for certifications (e.g., CIPP/E, CIPT) Exposure to cutting-edge privacy and compliance initiatives