Data Protection Officer

Job Summary

As the DPO you will be responsible for ensuring compliance with data protection regulations and safeguarding the privacy of personal information across our company. This role involves overseeing data protection policies, procedures, and practices to mitigate risks and uphold legal obligations. The DPO works alongside the Group Legal Counsel and closely with other stakeholders including the CFO, the CPO, the CIO.

Job Duties

• Maintain, modernise and implement data protection policies, procedures, and guidelines in line with applicable laws and regulations, such as GDPR and other relevant privacy laws.
• Provide expert advice and guidance to senior management, departments, and staff on all data protection matters, ensuring awareness and adherence to legal requirements.
• Conduct regular audits and assessments to monitor compliance with data protection policies and identify areas for improvement.
• Support the Learning and Development team to deliver high level training and refresher requirements across the whole business to promote a culture of data protection knowledge and privacy compliance throughout the company.
• Serve as the primary point of contact on all data protection matters for the US Parent Company and its officers, the UK Executive Directors, data protection authorities, regulators, and individuals regarding data protection issues and inquiries.
• Ensure all appropriate registrations with the ICO are in place and renewed as required.
• Oversee data protection impact assessments (DPIAs) and manage risks associated with data processing activities, recommending appropriate measures to address identified risks.
• Oversee the appropriate management and completion of data subject access requests (DSARs) and identify appropriate technology to streamline and improve efficiencies.
• Prepare monthly Board level reports of data protection activities and incidents.
• Prepare ad hoc advice on Data Protection as required and high-level review on supplier contracts where required.

Requirements

• Work closely with the IT team to support their work in IT security requirements.
• Stay informed about developments in data protection laws, regulations, and best practices, and advise on necessary actions to maintain compliance.
• Represent the company externally on data protection matters, including participating in industry forums, conferences, and working groups.
• Apply strong analytical and problem-solving skills across all areas of data protection to interpret complex legal and technical requirements, distil technical requirements and provide practical solutions.
• Engage effectively with stakeholders at all levels in the Business to support them in their respective compliance journeys.
• Work independently and collaboratively managing multiple priorities and deadlines effectively.
• Demonstrate leadership capabilities, with experience in leading and influencing cross functional teams.
• Manage the reduction in support from the DPO Centre to reduce reliance from commencement of Q2.
• Supervise and develop the Data Protection and Legal Coordinator & Deputise for the Group Legal Counsel when required.