Job Description
A FTSE 100 insurance client of mine is looking for 3 new data protection consultants to expand their global function, working across a number of exciting digital projects within the business.
Be a point of contact for all areas of the Group for the provision of advice relating to compliance with the Data Protection Act 2018, UK GDPR & EU General Data Protection Regulation, Privacy and Electronic Communications Regulations (PECR) and all associated legislation and guidance. 
Devise, implement and maintain the data protection policies, guidelines, training and associated materials for the Group to identify, manage, monitor and report on the regulatory data protection risks that the Group is exposed to. 
Produce relevant Data Protection MI and communicate the risk position through relevant risk governance reporting. 
Promote data protection compliance within the organisation through building effective two way relationships across the Group, understanding business needs and supporting the embedding of a strong DP culture. 
Actively manage the oversight and assurance of, and build closer working relationships with, strategic and critical suppliers. 
Develop, undertake and report line 2 oversight assurance activity in a timely manner. 
Manage data protection incidents including the regulatory notifiable events, liaising with the regulator as appropriate and ensuring that the business takes a risk-based and compliant approach to remediation. 
Oversee the response to subject access requests, data protection complaints, queries and privacy impact assessments to ensure they are managed effectively across the Group; 
Oversee the Group's response to key pieces of data protection legislation or the moving regulatory and threat landscape and co-ordinate and communicate the response, as required