Data Protection Officer

2 weeks ago

London, UK, United Kingdom HAYS Full time

Group Data Protection Officer, FTSE Organisation


Reporting to:


Group General Counsel & Company Secretary.


Role Objectives:

Reporting to the Group General Counsel & Company Secretary, you will be responsible for overseeing the Group’s data protection function, including strategy and implementation on a Global scale. You will be a key decision maker and take a lead on data protection within the Group. Within this role you will monitor compliance and data practices internally to ensure the business and its functions comply with the applicable requirements under the GDPR and other relevant legislation. As well as this, you will be responsible for advising on, and where required carrying out, staff training, data protection impact assessments, data transfer impact assessments, and internal audits.


Given this is a newly created role for a Global FTSE organisation, it will give you the ability to shape the function and make a huge difference to the organisation. The company is constantly evolving, and you will be a key part of that, as well as being expected to contribute strategically. The responsibility of the data protection function across the Group is within 30+ countries and the company have a fantastic, inclusive culture and are always striving to do the right thing.


Requirements, Skills and Competencies:

In this role, you will work closely with the Legal and Compliance function, as well as other group functions, to develop and monitor policies and standards applicable to the business and in compliance with the GDPR and other relevant legislation. Your responsibilities will include, but not be limited to:

  • Implementing measures and a privacy governance framework to manage data use in compliance with the GDPR and other relevant legislation, including developing templates for data collection.
  • Working with key internal stakeholders in the review of operations and projects and related data processing to ensure compliance with data privacy laws, and where necessary, advising on and monitoring data protection privacy impact assessments.
  • Serving as the primary point of contact and liaison for the relevant supervisory authority on all data protection related matters under the GDPR and other relevant legislation.
  • Serving as the primary point of contact for data protection queries in the business.
  • Reviewing vendor contracts (including relevant standard contractual clauses and transfer impact assessments for international data transfers) and other third-party data processing and data sharing arrangements in partnership with the organisation's Legal and Information Security functions.
  • Ensuring fee requirements with the relevant supervisory authority are achieved.
  • Advising on and assisting with data mapping and records of data processing, and vendor management reviews.
  • Managing and conducting ongoing reviews of the Group’s privacy governance framework and regular and ad hoc reporting on data privacy compliance within the organisation.
  • Monitoring changes to relevant privacy laws and making recommendations to the Executive Risk Committee when appropriate.
  • Setting standards and reviewing policies and procedures globally that meet the requirements under the GDPR and any localization requirements in countries of operation.
  • Developing and delivering privacy training to various business functions and collaborating with the Information Security function to raise employee awareness of data privacy and security issues.
  • Developing strategies and initiatives to ensure engagement with key internal and external stakeholders.
  • Coordinating, conducting, and monitoring data privacy audits and addressing any potential issues.
  • Collaborating with the Information Security function to maintain records of all data assets and exports and maintaining a personal data security incident management plan to ensure timely remediation of incidents impacting personal data including impact assessments, breach response, complaints, claims or notifications.
  • Responding to and advising on data subject rights requests, including data subject access requests (DSARs) and other requests from individuals.
  • Ensuring that the Group’s IT systems and procedures comply with all relevant data privacy and protection law, regulation and policy (including in relation to the retention and destruction of data).
  • Working with designated privacy lawyers, subject matter experts or champions across the Group’s offices and, where necessary, outside legal advisers to help advise on data privacy law issues.


Knowledge, Qualifications and Experience:


Education

  • Qualified lawyer preferred, but not essential.
  • Holding at least one data protection and/or privacy certification, such as CIPP, CIPT, CIPM, ISEB, etc.


Work Experience

  • 5-10+ years (guideline only) data privacy experience or alternatively 5-10+ years’ experience within a compliance, legal, audit and/or risk function, with significant recent experience in privacy.
  • Experience in EU and International data privacy laws.
  • Experience in developing policy and compliance training.
  • Experience in setting up and improving data protection functions, across UK&I, Europe and Internationally.
  • Looking after the process Globally and advising key stakeholders.
  • Ideally experience within a FTSE/listed environment.


Required Knowledge, Skills, and Abilities

  • Expertise in data protection laws and practices, including strong knowledge of International and European data privacy and data protection regulation, and a good understanding of other major privacy frameworks and evolving legislation worldwide.
  • Well-developed and professional interpersonal skills; ability to interact effectively with people at all organisational levels of the firm.
  • A growth mindset, good commercial acumen and a pragmatic individual who is confident exercising judgment in a complex business environment.
  • Experience of working in a large, global organisation.
  • Ability to work unsupervised, exercise leadership and influence change.
  • Strong change and project management skills, including the ability to manage time well, prioritise effectively and handle multiple deadlines.
  • Ability to undertake large, long-term projects, develop alternative methods to complete them and implement solutions.
  • Ability to use independent judgement and discretion when making majority of decisions.
  • Detail-oriented approach needed to recommend and implement strategic improvements on a range of data privacy and data protection issues.
  • Ability to handle confidential and sensitive information with the appropriate discretion.


Additional Requirements

  • Some international travel may be required.
  • The statements contained in this role specification are not necessarily all-inclusive; additional duties may be assigned, and requirements may vary from time to time.

  • Data Protection Officer

    5 days ago

    London, UK, UK, United Kingdom The Restaurant Group Full time

    About us:We're The Restaurant Group (TRG for short) and we're one of the UK's biggest hospitality businesses. Were a significant player in the UK casual dining market, operating over 400 restaurants and pubs including Wagamama,Barburrito + Brunning & Price. Our diverse portfolio of brands provides something for everyone, and we are proud to be...

  • Data Protection Counsel

    1 month ago

    England, London, London, UK, United Kingdom LHH Recruitment Solutions Full time

    Are you an interim Data Protection Specialist? You will also need to be a Lawyer with commercial, data protection, marketing, and consumer law experience?Join our client, a leading provider of security services on a 6 month basis. About the Role:Collaborate with the Head of Legal UK and work closely with sales, marketing, finance, operations, and HR...

  • Group Data Privacy Officer

    7 days ago

    London,, UK, United Kingdom Bateman Collins International Full time

    Interim Group Data Privacy Officer United KingdomThe OpportunityOur client, a leader in the financial services industry, is seeking an experienced Interim Group Data Privacy Officer to drive and manage its data privacy and compliance initiatives. This role will ensure that privacy standards and regulatory obligations are maintained across the organisation....

  • Legal Counsel

    2 weeks ago

    London,, UK, United Kingdom Taylor Root Full time

    Our client, a reputable, multinational consumer goods company, are recruiting for a skilled and proactive Data Protection Lawyer to advise on privacy and data protection law and implementation, across their UK and EMEA businesses. The main purpose of the role will be to support the various businesses to implement their data protection initiatives, and to...

  • Data Protection Lawyer

    6 months ago

    London , London, UK, United Kingdom Eximius Law Full time

    My client, a top tier bank, is looking for a Senior Data Protection Lawyer for their London legal team. Responsibilities will include providing advice on privacy and data protection requirements, negotiating and drafting the privacy aspects of complex professional services, technology and supplier agreements. The ideal candidate will have prior...

  • Data Office Manager

    1 month ago

    London,, UK, United Kingdom DVF Recruitment Full time

    I am currently partnered with a Leading Insurance firm, looking to bring on a Data Office Manager. This role requires someone with strong experience in driving data strategy, delivering key data projects, and spearheading their data culture programme across the business. This role will require you to head into their London based office 1-2 times per week and...

  • Data Analyst

    2 weeks ago

    London,, UK, United Kingdom Delta Executive Search Full time

    Background:Reporting to the Chief Investment Officer within a Global Family Office based in the GCC, the Data Analyst will extract data related to our investments from multiple sources, organise this data, process it, clean it, and validate it. The objective is to present this data in a clear, accurate and exhaustive manner in order to facilitate timely...

  • Information Protection Manager

    2 weeks ago

    London, UK, United Kingdom State Street Corporation Full time

    Who we are looking for State Street seeks to recruit an Information Protection VP responsible for leading a governance and reporting team within the Information Protection program at State Street. This leader will have the responsibility to grow and run the team responsible for receiving, assessing, and identifying compliance / non-compliance with the...

  • Data Privacy Analyst

    2 months ago

    London,, UK, United Kingdom Lex Dinamica Part time

    Exciting opportunity for a 6-month paid internship with a Data Privacy Consulting firm!Our client is seeking a motivated and detail-oriented Data Privacy Intern to join their team. This internship offers a unique opportunity to gain hands-on experience in the field of data privacy and consulting. The ideal candidate will be eager to learn, highly organised,...

  • Financial Planning Analyst

    4 days ago

    London, UK, UK, United Kingdom Vantage Data Centers Full time

    About Vantage Data CentersVantage is committed to being a workplace of inclusion, equity, respect and acceptance. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience.Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large...

  • Legal Counsel

    2 months ago

    London,, UK, United Kingdom Alchemy Global Talent Solutions Full time

    Purpose of the RoleThe Legal Counsel will play a critical role in providing comprehensive legal guidance and support across the organisation. The ideal candidate will oversee a wide array of legal responsibilities, including ensuring compliance with data protection regulations, upholding UK legal standards, and mitigating potential legal risks. This position...

  • SAP Partner Manager

    1 month ago

    London,, UK, United Kingdom NTT DATA Business Solutions Part time

    About NTT DATA Business Solutions: NTT DATA Business Solutions Group is part of the NTT DATA Corporate Group a top 10 global IT services provider, headquartered in Tokyo, operating in more than 50 countries. We combine a global reach with local intimacy to provide premier professional SAP services from deep industry expertise consulting to applied...

  • Data Privacy Associate

    3 weeks ago

    London, UK, United Kingdom Zopa Bank Full time

    We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre —...

  • Critical Facilities Technician

    1 month ago

    London,, UK, United Kingdom Vantage Data Centers Full time

    About Vantage Data CentersVantage is committed to being a workplace of inclusion, equity, respect and acceptance. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience.Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large...

  • Human Resources Payroll Administrator

    2 months ago

    London,, UK, United Kingdom NTT DATA Business Solutions Full time

    About NTT DATA Business Solutions:NTT DATA Business Solutions Group is part of the NTT DATA Corporate Group a top 10 global IT services provider, headquartered in Tokyo, operating in more than 50 countries. We combine a global reach with local intimacy to provide premier professional SAP services from deep industry expertise consulting to applied innovations...

  • Lead Data Engineer

    3 weeks ago

    London,, UK, United Kingdom Mastek Full time

    Lead Data EngineerPermanent OpportunityLocation: London, UK – 2 days travel to officeOverview: We are seeking a highly skilled Lead Data Engineer to join our team for a critical project with NHS England. The project involves migrating Privacy Enhancement Technology (PET) from the existing Privitar system to IQVIA across multiple data platforms. The ideal...

  • Protection and Control Design Engineer

    3 weeks ago

    London,, UK, United Kingdom The Green Recruitment Company Full time

    Protection and Control Design EngineerVarying Levels of expertise can be hiredThe Opportunity:Join a dynamic global advisory firm committed to shaping the future of energy. My client are seeking an experienced Protection and Control Design Engineer from Senior Consultant through to Technical Director level.Key Responsibilities:Cross-Regional Collaboration:...

  • Data & Cyber Associate

    2 weeks ago

    London, UK, United Kingdom myGwork Full time

    This job is with Taylor Wessing, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Taylor WessingTaylor Wessing is a global law firm that serves the world's most innovative people and businesses. Deeply embedded within our sectors, we...

  • Mortgage Advisor

    3 months ago

    London, UK, UK, United Kingdom Secure Mortgages & Protection Full time

    If you are an experienced Mortgage Advisor seeking to maximise your income and skillset whilst ensuring you have a global support and training platform; together with industry-leading products and services, then we want to speak with you.Secure Mortgages and Protection (SMP) are a strategic partner of deVere, the worlds largest international advisory and...

  • Senior Pricing Actuary

    2 weeks ago

    London, UK, United Kingdom Goodman Masson Full time

    Key Responsibilities: Engage actively in the tender process for new and existing opportunities, with a primary focus on UK and Irish Term Life and Critical Illness product lines. Conduct comprehensive modelling and pricing for protection deals, from initial assessment to execution and transition to the in-force management team. This includes data...