Data Privacy Officer

Job Responsibilities

• You will help manage the Group’s privacy and data protection compliance program, including our continuous compliance efforts for the General Data Protection Regulation (GDPR), and similar data compliance operational and administrative work.
• You will work very closely with the COO and senior team, managing data protection impact assessments, incoming inquiries of data subjects, and other GDPR-related tasks.
• You will help to draft and review a variety of commercial contracts and agreements with our Users and business partners
• You will have the ability to handle sensitive, confidential matters and exercise sound discretion and judgment.
• Liaise with relevant stakeholders across the business to advise on the design and deployment of appropriate data privacy processes and controls where required.
• Demonstrate strong organisational skills in guiding and advising data protection compliance related activities.
• Participate in meetings with managers to ensure privacy by design at all levels.
• Provide advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs).
• Responsible for the management of data protection incidents.
• Coordinate personal data breach response and notification procedures.
• Act as point of contact for data subjects.
• Provide guidance on responses to data subject access requests, to ensure that Group addresses all queries from data subjects within the legal timeframes.
• Monitor data management procedures and compliance within the Company.
• Regularly review and audit records of data processing activities.
• Perform regular audits to assess levels of data privacy compliance across the organisation.
• Liaise with other organisations that process data on our behalf.
• Continuously evaluate the Company’s data processing activities.
• Develop, communicate and regularly review the Company’s data privacy and data protection policies, guidelines, privacy notices and training material.
• Lead and promote a culture of data protection compliance across the business.

Experience Required

• Experience in practically implementing a data protection program;
• Implementing data management workflows and best practices in projects of different natures;
• Auditing software, communication, computing systems and their architectures;
• ICT and Information Security standards (e.g. ISO 27000 series) and their trends;
• Knowledge of privacy frameworks and management systems such as ISO 29100 and BS 10012;
• Definition, implementation and management of ICT and Information Security policies.
• Project management experience.

Essential and Desirable Skills

• Excellent investigative, problem solving and follow through skills;
• Prioritising, multi-tasking and organisational skills;
• Conscientious attention to detail and quality focused;
• Commercially aware;
• Excellent interpersonal communication skills (written and verbal).
• Strong relationship building skills;
• Very strong personal time management;
• Motivated to work on own initiative;
• Works well under pressure.
• Minimum 5 years of practical experience in a data protection/compliance environment;
• Practical legal and regulatory experience in the areas of data protection;
• Undertaking risk assessments and data privacy impact assessments (DPIAs);
• Embedding DPIA processes in operational activities (i.e. change management, risk management, etc.);
• Managing and responding to data subject access requests;
• Analysis or production of data protection policies and privacy notices;
• Advanced knowledge, analysis and interpretation of the GDPR including both data controllers and data processors, including contract reviews.