Job Description
About the role
The firm is looking to hire a Data Privacy SME to assist the Data Protection Officer (DPO) with the creation and maintenance of our Data Privacy Governance Framework and the policies, processes and records that are applicable to the business in compliance with the UK GDPR and other relevant national laws. You will work closely with numerous business operations and technical teams across the business, including Risk, HR, Information Security, Supplier Management and IT engineering.
You will be reporting directly to firm's Data Protection Officer (DPO).
Your key responsibilities include

• Assisting the DPO with maintaining and conducting ongoing reviews of the firm's privacy governance framework.
• Providing assistance with the development and ongoing maintenance of the firm's records of processing activities (ROPA).
• Supporting with data protection impact assessments (DPIA) and appropriate actions associated with changes within process and enabling technologies.
• Assisting with vendor management reviews to assess data privacy risks, in partnership with the firm's Supplier Management and Information Security functions.
• Providing support to the DPO with responses to data subject requests, including data subject access requests (DSARs) and other requests from individuals.
• Developing and managing the firm's data mapping framework and assisting with the continuous improvement of the firm's Data Privacy maturity level, whilst maximising the overall value of the data we process.
• Assisting in the development and drafting of data privacy policies and standards in line with best practice and regulatory requirements.
• Supporting with the management of any associated privacy risks and ensuring adherence to internal privacy policies as the business continues to develop and grow into multiple jurisdictions.
• Generally helping the DPO drive data protection and compliance awareness across the business, including in the creation of training materials.

Requirements Ideally you will have...

• Good working knowledge and understanding of the UK GDPR and UK DPA 2018.
• Extensive practical experience of data privacy and in implementing associated privacy requirements and processes, including records of processing activities (ROPA), privacy impact assessments (PIA), data protection impact assessments (DPIA) and data subject access requests (DSAR).
• Hands-on experience in data flow mapping.
• Drive and determination to meet agreed outputs and complete work to a high standard.
• Able to demonstrate initiative and being proactive to meet agreed deadlines.
• Excellent written and oral communication skills.
• Strong problem-solving skills, with a tenacious approach.
• Can display strong attention to detail.
• IT literate and able to use Microsoft Office Packages.

If you also have experience with any of the following, we'd love to hear from you...

• Experience in a fast moving, dynamic, digital, entrepreneurial businesses
• Demonstrable high levels of integrity and desire to make a positive impact within the business and society
• Proven ability to work under pressure and deliver to tight deadlines
• Planning and organisational skills, with strong attention to detail
• Ability to operate effectively in an agile organisation
• Knowledge and understanding of the core concepts of information security

Benefits

• 25 days holiday and an extra day off on your birthday plus Bank/Public Holidays
• Pension scheme
• Private Health Care via AXA PPP, with the option to add your family
• Life Assurance
• Income Protection
• Subscription to Headspace wellbeing app
• Flexible benefits to suit your lifestyle via salary sacrifice
• Enhanced parental policies, dependent on tenure
• Regular company-funded socials
• All the latest tech you need to enable you to deliver excellent output
• You will also be eligible for any additional employee benefits that may be introduced in the future