Senior Data Protection Consultant (Health and Social Care)

Our rapidly growing business offers a dynamic environment for insightful, collaborative, impactful and innovative professionals to thrive and grow their careers.

We are currently looking for an experienced Consultant to join our Cyber security and Privacy Practice to work with our clients in the health and social care sector to help address their data protection and information governance challenges. The successful candidate will have strong knowledge of data protection and information governance in health and social care, preferably in the NHS, and demonstrable experience in engaging with a wide range of stakeholders from this environment.

London Office
Salary Range
£40,000- £55,000 based on experience
Employment Type
Contract Basis
Full time (happy to consider flexible working)
Closing Date
Ref No


The successful candidate will:

  • support team members with the development and implementation of information governance programmes for clients;
  • provide clear, practical and succinct advice and guidance to clients;
  • assist team members on client accounts operating in other sectors by advising on a wide range of privacy and data protection issues;
  • work across multiple service areas of our clients to implement information governance at an operational level, including but not limited to:
    • Developing comprehensive records of processing activities
    • Undertaking complex and large-scale data protection impact assessments
    • Developing a third-party assurance framework for health and care service providers
    • Reviewing/drafting data sharing agreements and data processing agreements
    • Developing appropriate policies and processes to ensure that information systems are secure
  • support team members and the Head of Health with the growth of our health vertical, including but not limited to:
    • the development of service proposals for the health and care sector
    • the development of external publications on topics of key interest
    • speaking at industry events and conducting webinars with the aim to promote awareness of the ‘Gemserv Health’ brand


Experience and Knowledge Requirements

The successful candidate will:

  • have proven experience in a data protection or information governance role, an excellent understanding of information governance frameworks and best practices in the field of data protection and information sharing, ideally within an NHS data-centric environment for a minimum period of 4 years.
  • have expert knowledge of the GDPR and be able to articulate the derogations applicable in the health and social care sector.
  • have knowledge of Caldicott principles and their application, ideally within the NHS.
  • have experience of implementing policies and procedures, especially in information sharing, management of third-party risks in the health and care sector.
  • have direct experience of the NHS Data Protection & Security Toolkit.
  • have commercial acumen and is keen to contribute to the growth of our health vertical.
  • have experience in communicating and cooperating with supervisory authorities.
  • be keen to learn and keep abreast of regulatory changes.
  • have experience of business transformation and changes in a fast-paced working environment.
  • have the confidence to build and maintain positive relationships with clients and a variety of stakeholders, including within the business.
  • be keen to mentor and offer guidance to more junior members of the team.
  • possess strong communication and presentation skills, both written and spoken.


We will consider candidates who have no prior working experience in a consulting environment, however, a candidate with previous consulting experience is preferred.


Desirable Requirements

  • CIPP/E and CIPM certifications or equivalent
  • A keen interest in data protection at a global level to be able to support team members with client work in other sectors


Key Skills and Qualities Requirements

The successful candidate will:

  • be able to quickly grasp and analyse complex issues and formulate effective solutions;
  • prioritise tasks to manage deadlines and be able to work autonomously;
  • actively seek to develop own expertise in technical and commercial areas;
  • be a proactive, ‘hands on’ starter finisher, high achiever, and results driven individual;
  • be a problem solver with high attention to detail;
  • have excellent interpersonal and team playing skills with the ability to work effectively and collaboratively with different members of a wide and multicultural team;
  • be confident in a client facing environment and personable.

This role will report to the Principal Consultant in the Data Protection Team. Some travel to client site may be required.

Upon employment, employees should also have a sound awareness of the Company's Information, Quality, Environmental and Energy Management Systems.



We are passionate about helping drive market transformation and the data revolution. We work right across our sectors, from government bodies to global blue-chip organisations and small independent companies.

The nature of what we do means we are very much a people business. The contribution every member of the team makes to our diverse range of experience, skills and personalities is valued.

Gemserv is an equal opportunities employer, we celebrate diversity and are committed to create an inclusive environment for all employees.

We invest heavily in learning and development to enable our people to develop skills and gain experience which will enhance career prospects for life. Many who started their careers with us have rapidly progressed to more senior positions.

At Gemserv no two days are the same, but we believe in a flexible approach to working which we know our employees value. That focus on encouraging a positive work/life balance extends to the many regular social events where employees get the opportunity to meet people from across the business and the wider industry in a more informal environment.

HR Recruitment Graphic


If you can see yourself working at Gemserv, then we would love to hear from you. Please submit your CV and application letter to us.

Happy to talk flexible working