Data Protection Consultant

This role is for an experienced, highly competent and motivated Privacy Consultant to join the Data Protection & Privacy Practice.

The nature of what the DXC Data Protection and Privacy, Privacy Consultants do is highly specialist and consequently required appropriately trained and seasoned consultants who have experience of time on the ground delivering such services.

The role is focused on providing consultancy and delivery of analysis and advisory services to clients in all Data Protection and Privacy related matters and aligning business processes and projects with associated laws, regulations and commercial obligations.

DXC Technology operated a ‘Virtual First’ operating model, nevertheless, where business needs require, there may be extensive working at customer sites across the UKII EMEA or further afield as business and operational needs arise, thus base location is flexible with a willingness to travel.

The position is to orchestrate and assess the privacy maturity (data protection by design) of client offerings, solutions and/or services and provide independent oversight, support risk remediation in relation to regulatory and commercial privacy requirements through:

- Advising on and enhancing the data protection and privacy maturity of enterprise wide client environments.
- Defining and advising privacy vision, locating gaps, develop security architecture and creating prioritized roadmap for privacy maturity.
- Providing expert advice on selection, design, implementation and operation of Privacy controls and Privacy enhancing Technologies.
- Advising clients on the development and implementation of Privacy policies, processes & support infrastructure
- Assessing where required that Privacy assurances to regulatory bodies are accurate, up to date and regularly reviewed.
- Supporting the creation of governance structures for Data Protection and Privacy maturity within client environments.
- Supporting a management control structure to support client business compliance with country specific data protection and privacy legislation.
- Working with clients to ensure correct submissions are made to regulatory bodies where required.
- Working with the client to run inventory audits of personal data held within a client in order to support Data Protection & Privacy processing activity assurances;
- Facilitating the delivery of Data Protection and Privacy Threshold and Data Protection Impact Assessment and risk analysis and develop appropriate mitigation processes and control framework
- Supporting the closure of preventative and corrective actions identified in Data Protection and Privacy Impact Assessments
- Work with clients to develop and implement Data Protection and Privacy governance plans.
- Supporting reviews of 3rd party contracts for and assurance of Data Protection and Privacy clauses in contracts and privacy notices/statements.
- Working with client in reviewing systems, procedures, processes and provide expert guidance to ensure on-going alignment with Data Protection and Privacy obligations.

Job Content

**Summary of job purpose**:
The job holder is primarily responsible for ensuring data protection by design and by default and that there are appropriate control frameworks and processes in place for Data Protection and Privacy within each client business environment to enhance maturity and aid compliance with legal, regulatory and commercial obligations.

**Planning and reporting**:
Responsible for devising and managing the client(s) data protection program(s), execution and delivery of agreed statements of work and providing regular reporting on progress against such plans.

Client(s) Engagement Timeframes - will depend on the specific statement of works and/or business scheduling.

**Relationships**:

- Potential liaison as part of normal routine with:

- Information Commissioners Office and other regulators
- Associated trade bodies
- Police and other enforcement bodies
- The general public (including complainants)
- Other external bodies including External Auditors
- Client (staff and management) at all levels, including Heads of Business function, Audit, Risk, Compliance, Legal, Coordinator groups.
- DXC and associated companies and strategic partners as directed by the Capability Lead Data Protection & Privacy Practice UKIIMEA, or Practice Team Lead.