Data Protection & Governance Support Assistant

Role:                                     Data Protection & Governance Support Assistant

Location:                             Leeds, LS15 (with hybrid working after completion of training)

Salary:                                 £26,000 - £33,000 per annum DOE, plus extensive benefits

Contract type:                    Permanent

Employment type:             Full time

Working hours:                   37.5 hours per week – Monday - Friday

Do you want to work for the nation’s largest online pharmacy ensuring excellence for all our patients? We’re a market leader in the pharmacy world, with 25 years’ experience, helping over 1.4 million patients in England manage their NHS prescriptions from request through to delivery.  We are Great Place to Work certified as we consider colleague experience a top priority every day.  Our people are fundamental to our success and ensuring we achieve our vision to be a world leading, patient-centric digital healthcare provider.  We are committed to continuing to develop a positive, open and honest working environment for all.

As part of the Information Governance & Security Team, you’ll contribute to maintaining high standards of data protection and information governance across the Pharmacy2U Group. This is a varied and hands-on role where you’ll play a key part in supporting privacy, information governance, and wider compliance activities.

 What’s in it for you?

Occupational sick pay                      

Enhanced maternity and paternity pay                        

Contributory pension 

Discounted insurance (Aviva)          

Employee discount site                                                  

Discounted gyms (via our blue light card and benefits schemes)

Employee assistance programme  

In-house mental health support                                   

Free onsite parking  

Health and wellbeing initiatives      

Social events throughout the year                                

Cycle to work scheme 

Green car scheme*(subject to minimum earnings)                   

Registration fees paid (GPhC, NMC, CIPD etc)             

Long service bonus 

Refer a friend bonus                        

Blue light card                                                                 

Hybrid working

Commitment to CPD/training         

25 days annual leave increasing with service

Annual leave buy and sell scheme

Discounts & Exclusive offers at The Springs, Leeds

25% Discount & health & beauty purchases 

25% Discount on Pharmacy2U Private Online Doctor Services

What you’ll be doing?

• Investigate, document and follow up on data incidents and breaches
• Conduct and advise on risk assessments, Data Protection Impact Assessments (DPIAs), and Legitimate Interest Assessments
• Maintain core compliance documentation, including Records of Processing Activities, registers (e.g. risks, incidents), and training logs
• Support regular audits and reviews of our information governance and security frameworks
• Contribute to the delivery and continuous improvement of staff training (e-learning, webinars, in-person sessions)
• Assist with privacy compliance in new projects and initiatives, ensuring privacy by design is embedded early
• Collaborate with departments across the organisation—such as IT, HR, customer service, pharmacy, purchasing, and operations—to embed good governance and data protection practice
• Respond to internal and external data protection queries and maintaining shared resources and staff guidance on platforms like SharePoint
• Help ensure policies remain up to date and aligned with legal and regulatory expectations
• Manage governance-related inboxes and task tracking to ensure timely response and follow-up

Who are we looking for?

·        GCSEs (or equivalent) in Maths and English, grade C / 4 or above

·        Previous experience in a support, administration, or coordination role

·        Confident using Microsoft Office and handling tasks that require a high level of precision and organisation

·        Understanding of UK data protection and privacy legislation (e.g. UK GDPR, Data Protection Act 2018)

·        Confident using IT systems, with the ability to quickly pick up new tools and processes

·        Comfortable working independently while being a dependable and supportive team player

·        A strong track record of managing workload in fast-paced or deadline-driven environments

·        Experience working within regulatory, ethical, or compliance frameworks

What happens next?

Please click apply and if we think you are a good match, we will be in touch to arrange an interview.

Applicants must prove they have the right to live in the UK.

All successful applicants will be required to undergo a DBS check.

Unsolicited agency applications will be treated as a gift.

#INDLP