Senior Data Protection Specialist

The opportunity

As a Senior Data Protection Specialist, you will provide operational governance and oversight through reporting KPIs, KRIs and other metrics to monitor and demonstrate compliance with all relevant privacy & data protection laws. 

You will work within a data protection team to implement and embed a DP and privacy management programme, based on the UK Information Commissioner's Office (ICO) accountability framework to monitor, and maintain compliance with the UK GDPR and other relevant privacy or data protection laws. Ensuring any risks to the rights and freedoms of our data subjects are identified and managed. This is a hybrid role and sill be based in our Swindon offices 2-3 days per week The Benefits Salary - up to £52000 Bonus scheme - on target bonus -10%
Pension scheme - contribute up to 5% of your salary and Openwork will match you and put in an extra 5% Critical illness cover Income protection Death in service  25 days holiday + bank holidays, with the opportunity to buy up to an additional 10 days A range of other flexible benefits to include private medical insurance, dental insurance and much more. Key accountabilities Privacy & Data Protection (PDP) Guidance Manage PDP queries across OHL, working with the DPO, Legal or the ICO help teams as needed.
Maintain central location for PDP guidance & templates. Operational Procedures Create, issue, socialise, operate and maintain privacy related procedures across OHL.
Identify privacy process enhancement opportunities and lead the design and implementation.
Operate and maintain relevant tooling such as the PDP modules of OneTrust and issue tracking within Simple Risk Training & Awareness
Educate stakeholders on data protection processes.
Creation and maintenance of colleague and AR related portal content – guidance, policy, process.
Work with the Business School to ensure all colleagues and partners complete both general and role-specific training courses periodically.
Individual Data Protection Rights
Fulfil rights requests for data controlled by the entity:
Subject Access Request (Clients, Colleagues and Appointed Representatives) Complaints
Data Erasure
Data Portability 
Rectification of data Manage the Individual Data Protection Rights processes by working collaboratively with internal stakeholders and communicating outcomes effectively to data subjects and any other applicable parties. Accurately screen, redact and record the reasoning for withholding personal data in line with applicable legal, regulatory and sectoral requirements.
Data Protection Incident & Breach Response
Ensure PDP breach reporting processes are in place.
Investigate PDP breaches.
Manage day to day PDP incidents and breach tracking. PDP Risk and Data Protection Impact Assessments Identify PDP related risks to processing of data and advise stakeholders on appropriate controls to take to improve risk posture.
Create and manage the DPIA process and documentation. 
Conduct DPIAs every time a high-risk processing operation is proposed or existing one changes.
Record and track PDP risks (including as part of Business risk assessments) and issues. 
Escalation to DPO for identified risks and complex DPIAs. PDP by Design & Default Ensure PDP requirements are built into operational changes and projects through representation at the Change Advisory Board (CAB), Technical Design Boards and advocacy across 1st line operational teams Records of Processing, Lawful Basis & Cookie policies Work with operational teams to ensure the periodic data mapping of personal data across the OHL businesses. Work with operational teams to create and maintain a record of data processing activities (ROPA) which is updated when changes to systems, services and suppliers are made. Identify and record the lawful basis of processing for each process within the ROPA. Contracts & Data Sharing Ensure all contracts with data processors reflect the necessary PDP clauses. Work with Strategic Sourcing colleagues to conduct 3rd party due diligence on potential new suppliers. Engage with DPO and Legal resources where issues arise. Partner AR Oversight Work with quality teams to ensure AR firms are meeting expected PDP compliance requirements.

What will you need to succeed?

Recognised certification in UK/European privacy and data protection preferred: CIPP/E, CIPM, or equivalent.
Previous track record of data protection work, ideally within the Financial Services sector
Experience of operational environments where high volumes of personal data are held or processed
Good knowledge of UK GDPR, EU GDPR and other applicable privacy law or regulation
Strong understanding of information security controls and principles and their fundamental link to data protection
Strong knowledge of UK GDPR, EU GDPR, and PECR and other applicable privacy law or regulation
Strong understanding of information security controls and principles and their fundamental link to data protection
Technical understanding of technologies and their data protection and privacy implications.
Working knowledge of OneTrust, especially the Data Mapping and Third-Party Assurance module.
Understanding of relevant security frameworks and standards such as ISO27001 and NIST standards desirable.
Excellent writing, organisational and problem-solving skills 
Good project management and strong organisational skills to deliver effective programmes of change Good verbal and written communication skills with an excellent attention to detail
Excellent analytical skills, with the ability to analyse data for patterns and trends and deliver findings in a range of styles and format to various levels in the organisation.
To be able to work as part of a team or autonomously to ensure effective delivery of the data protection and private management programme In line with the UK Information Commissioner's Office (ICO) accountability framework
Strong influencing and stakeholder management skills and ability to challenge others and be challenged.
Adaptable to change, and flexibility to deal with any tasks as required.
Committed to continual improvement for yourself and those around you.

Why us?

We're a dynamic, fast-paced and growing business with huge ambition. This is all made possible by the brilliant people who are part of The Openwork Partnership family. We're investing heavily in our colleagues, continuously striving to give them the platform to develop personally and professionally and reach their full potential.

We’re also very proud of our culture, as one of the Best 100 Large Companies to work for in 2022. The Openwork Partnership values and respects individuality and we are committed to building an inclusive culture and environment where you can balance a successful career with your commitments and interests outside of work. We believe that you will bring your best self to work if you are trusted to choose when, where and how you do it.

On top of offering a modern workplace with bags of development opportunities, we also offer a highly attractive benefits package to reward you for your hard work. This includes a competitive base salary, an industry-leading annual bonus, enhanced pension, critical illness cover, income protection and a range of other flexible benefits.

---