Assistant Data Protection Officer

About the role

Bott and Co Solicitors, a 100% employee-owned law firm, is looking for an Assistant Data Protection Officer to join our growing Digital & Information Security function.

This is an excellent opportunity for someone looking to build a career in data protection, information governance and information security, working in a regulated professional services environment and gaining hands-on experience across a broad range of responsibilities.

You will play an important operational role in helping Bott and Co manage information securely, meet its regulatory obligations and maintain effective governance processes.

Working closely with the Head of Digital & Information Security, you will support the day-to-day delivery of data protection, information governance and Information Security Management System (ISMS) activities. The role has been created to provide dedicated operational capability and help us continue to develop our internal expertise in these important areas.

What you’ll be doing

Your responsibilities will include:

Data Protection

• Supporting the management of Subject Access Requests (SARs/DSARs) from receipt through to completion.
• Tracking deadlines and coordinating information searches.
• Supporting disclosure processes and maintaining accurate audit trails.
• Responding to routine data protection queries and escalating more complex matters where appropriate.

Information Governance

• Maintaining information governance registers and records.
• Supporting the maintenance of the Record of Processing Activities (RoPA).
• Assisting with data retention and deletion processes.
• Supporting the review and maintenance of privacy notices.
• Helping colleagues with day-to-day information governance queries.

Information Security & ISMS

• Supporting the firm’s Information Security Management System (ISMS).
• Maintaining evidence, records and action logs.
• Supporting risk assessments and information security incident administration.
• Assisting with supplier security reviews.
• Supporting the maintenance of information security policies and procedures.
• Helping coordinate staff information security awareness activity.
• Supporting preparation for internal and external audits, including ISO 27001 activity.

About you

We are looking for someone who is organised, curious and detail-focused, with an interest in data protection, information governance and information security.

You will ideally have:

• Knowledge of data protection, information governance and/or information security.
• Excellent attention to detail and a methodical approach to work.
• Strong organisational skills and the ability to manage deadlines.
• The ability to handle confidential and sensitive information appropriately.
• Good written and verbal communication skills.
• The confidence to work with colleagues across different areas of the business.
• A willingness to learn and develop specialist knowledge.
• The ability to maintain accurate records and follow established processes.

Experience of GDPR, SARs/DSARs, information governance, ISO 27001 or an ISMS would be advantageous.

Why join Bott & Co?

This is a chance to join a role that sits at the heart of an increasingly important area of the business.

You will gain exposure to a wide range of data protection, governance and information security activities, while working closely with senior colleagues and developing practical experience in a regulated environment.

The role will also provide the opportunity to develop internal capability across information governance, data protection and information security, while contributing to improved audit readiness, governance and organisational resilience.

At Bott and Co, you won’t just be maintaining processes, you’ll help us continue to build a strong information governance and security culture.

And as an employee-owned business, everyone here has a real stake in how well we do. Protecting our clients’ information and our reputation isn’t just a compliance task – it’s something we all have a shared interest in getting right.

About Bott & Co

At Bott and Co, we believe that the people who make our success possible should have a genuine stake in our future. That’s why we’re proud to be 100% employee-owned through an Employee Ownership Trust (EOT), which holds the business on behalf of everyone who works here. It means we’re independent, focused on the long term, and run for the benefit of our peo…