Information Security Officer – Data Protection and Compliance
4 weeks ago
Position Purpose
Based in our London Office, this role will be the lead Information Security Officer and expert on Data Protection (DP) matters, focusing on the global DP regulations (e.g. EU16 GDPR, Australian Privacy Act, New Zealand Privacy Act, Protection of Personal Information Act 4 of 2013 etc.) including the organisation DP Management System (DPMS). The Information Security Officer will ensure that sound policies, procedures and systems are in place so that Bravura Solutions can demonstrate compliance with the global DP legislation.
Main Activities
Whilst we expect all our employees to do what needs to be done to demonstrate their support of Bravura Solutions, below are some specific aspects of your role for which you will be responsible:
Data Protection
Ensure that Bravura Solutions is aware of and complies with DP law, best practice and any case precedents, interpreting law changes into practical policies and procedures Implement measures and a privacy governance framework to manage data use in compliance with applicable legislations. Work with key internal stakeholders in the review of projects and related data to ensure compliance with local data privacy laws, and where necessary, complete and advise on privacy impact assessments including developing templates for data collection, assisting with data mapping, and vendor management reviews To identify, test and improve controls on the confidentiality, integrity and availability of personal data Be the first point of contact for enquiries from staff on DP and subject access requests, providing them with appropriate advice and guidance. Compliance (Achieving and monitoring compliance including any remedial measures) Coordinate and conducting data privacy audits Draw up a DP Policy from the GDPR regulations, paying attention to new concepts and terminology and changed nuances of DP law, (e.g. right to be forgotten, data portability, additional new types of personal data, explicit consent) Working closely with colleagues, render the DP Policy into operational procedures for customer-facing staff to use Undertake proactive work and enforcement measures that promote good DP working practices and compliance with GDPR requirements Enshrine new principles, e.g. Privacy by design and DP by default Consider accreditation to external codes and protocols that may help demonstrate aspects of compliance with the main regulations Create registers as required by legislation, e.g. the type of personal data that we hold, who processes it and who we share it with Look at technical aids that support compliance (e.g. encryption, Data Loss Prevention) Carry out DP audits and spot-checks to monitor compliance Ensure subject access requests are responded to within prescribed timescales Deal with more complex and difficult DP complaints, including appeals Act as the primary point of contact between the company and regulatory authorities in all jurisdictions during data protection incidents, ensuring timely communication and compliance with reporting obligations. to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims or notifications, and responding to data subject access requests (DSARs).
Documentation
Design the documentation needed for use with the procedures:Data Protection Impact assessmentsPrivacy impact AssessmentsData Inventory RegisterData FlowsSAR ProcessCompliance DocumentsPrivacy Framework and processesReview of client contractual requirementsSupplier onboarding contract review and support in annual reviews
Third Parties
Examine arrangements for third parties who process the personal data of our residents and employees to ensure compliance with the new regulations Work with legal representatives to ensure that information-sharing with partners/suppliers is lawful and falls under appropriate protocols and codes
Risk
Ensure that managers are aware of the risk element of data protection, GDPR and any other relevant regulations implementation, including monitoring through the Risk register Maintain a risk assessment process for personal data including DP Impact Assessments
Training
Design and carry out training programmes to achieve compliance, e.g. Detailed, practical training for client-facing staff More general GDPR awareness training for other staff Carry out on-going DP and privacy training to maintain awareness
In addition to the above position-specific responsibilities, all employees are required to undertake any other reasonable duties and responsibilities within your capability and skills, when requested to do so.
Key skills
Experience in Information Security, data protection and legal compliance Work experience in data protection and legal compliance is a plus Solid knowledge of GDPR and applicable governing legislation such as The Australian/ New Zealand Privacy Act, UK DPA, Protection of Personal Information Act 4, The Digital Personal Data Protection Act, 2023 (“DPDP Act”), Personal Data (Privacy) Ordinance, Laws of Hong Kong (Cap 486) or the PD(P)O and Personal Information Protection Act (PIPA) etc. Decision Making – capable of reaching timely and effective decisions based on the appropriate use of information; Communicating – able to identify key points for interaction which are related appropriately and with clarity; Using Information & Communications Technology (and other resources) – able to use ICT and other equipment (tools, materials and services), safely, effectively and efficiently; Building Customer Service – able to provide Customer/Stakeholders with a positive experience of the service delivered; Embracing Change – can readily identify and embrace change in the drive towards continuous improvement; Developing and Maintaining Relationships – able to make working relationships harmonious and productive; and, Maintaining and developing the organisation – able to make a positive contribution to the success of Bravura Solutions. Working at Bravura Our people are the heart of our business. We work hard to provide a rich employee experience and a robust framework for ongoing career development. So, what’s next? We make hiring decisions based on your experience, skills and passion so even if you don’t match every listed skill or tick all the boxes, we’d still love to hear from you. Please note that interviews are primarily conducted virtually and if you require any reasonable adjustments or would like to note which pronouns you use, please let us know. All final applicants for this position will be asked to consent to a criminal record and background check. Please note that people with criminal records are not automatically barred from applying for this position. Each application will be considered on its merits.
-
London, United Kingdom Ventula Consulting Full timeJob Description Data Protection Officer and Information Security Manager One of the UK's largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company's information...
-
London, United Kingdom Ventula Consulting LTd Full timeData Protection Officer and Information Security ManagerOne of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security strategy,...
-
London, United Kingdom Ventula Consulting LTd Full time €90,000Data Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security...
-
London, United Kingdom Ventula Consulting LTd Full time €90,000Data Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security...
-
London, United Kingdom Ventula Consulting LTd Full timeData Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security...
-
London Area, United Kingdom Ventula Consulting LTd Full timeData Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security strategy,...
-
London Area, United Kingdom Ventula Consulting LTd Full timeData Protection Officer and Information Security ManagerOne of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security strategy,...
-
London Area, United Kingdom Ventula Consulting LTd Full timeData Protection Officer and Information Security ManagerOne of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security strategy,...
-
Information Security and Data Protection Manager
3 weeks ago
London, United Kingdom Ventula Consulting LTd Full time €90,000Data Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security...
-
Information Security and Data Protection Manager
3 weeks ago
London, United Kingdom Ventula Consulting LTd Full time €90,000Data Protection Officer and Information Security Manager One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. The Head of Information Security & Data Protection Officer (DPO) will be responsible for leading the company’s information security...
-
Data Protection
4 days ago
London, United Kingdom Ventula Consulting LTd Full time €90,000Data Protection Officer - London - Retail & Hospitality Giant One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. Data Protection Officer (DPO) will be responsible for leading the companies data protection strategy, ensuring the protection of digital...
-
Data Protection
3 days ago
London, United Kingdom Ventula Consulting LTd Full timeData Protection Officer - London - Retail & Hospitality Giant One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager. Data Protection Officer (DPO) will be responsible for leading the companies data protection strategy, ensuring the protection of...
-
Data Protection
6 days ago
London, United Kingdom Ventula Consulting LTd Full timeData Protection Officer - London - Retail & Hospitality Giant One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.Data Protection Officer (DPO) will be responsible for leading the companies data protection strategy, ensuring the protection of digital...
-
Data Protection
2 weeks ago
London Area, United Kingdom Ventula Consulting LTd Full timeData Protection Officer - London - Retail & Hospitality Giant One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.Data Protection Officer (DPO) will be responsible for leading the companies data protection strategy, ensuring the protection of digital...
-
Data Protection
1 week ago
London Area, United Kingdom Ventula Consulting LTd Full timeData Protection Officer - London - Retail & Hospitality Giant One of the UK’s largest hospitality groups (owner or leading global restaurant brands) is recruiting for a Data Protection and Information Security Manager.Data Protection Officer (DPO) will be responsible for leading the companies data protection strategy, ensuring the protection of digital...
-
Compliance Officer
5 days ago
London, Greater London, United Kingdom Bravura Solutions Full timeAbout the OpportunityWe are looking for a highly skilled Compliance Officer to join our team at Bravura Solutions. This is a key role within our organization, and the right candidate will have a deep understanding of data protection laws and regulations. As the lead Information Security Officer, you will be responsible for implementing measures to manage...
-
Information Governance
6 months ago
London, United Kingdom Data Communications Company Full time**The role**: **Information Governance & Data Protection Specialist** **Location - **London - Manchester - Nottingham - Hybrid working model. Competitive Salary plus benefits **The Role** This role will play an important part in supporting data protection and information governance compliance company-wide. As an experienced information management and...
-
Group Data Protection Officer
5 months ago
London, United Kingdom Data Idols Full time**Group Data Protection Officer**: **Salary: £100,000 to £110,000**: **Location: London - 2 days per week**: - We are currently looking for a Group Data Protection Officer to join one of the UK’s best-known brands and consumer platforms.**The Opportunity**: Data Idols is working with one of the UK’s best-known household brands that enables their...
-
Compliance Officer
1 month ago
London, Greater London, United Kingdom Compliance Professionals Full timeCompliance OfficerWe are seeking a highly skilled Compliance Officer to join our team at Compliance Professionals. As a Compliance Officer, you will be responsible for ensuring our company's compliance with regulatory requirements and industry standards.Key Responsibilities:Own, maintain, develop and review compliance policies, advising management on...
-
Data Protection and Compliance Specialist
3 weeks ago
London, Greater London, United Kingdom AJ FOX COMPLIANCE Full timeWe're assisting a boutique city law firm in finding a talented Data Protection Lawyer. This opportunity is ideal for someone with data protection, risk, and compliance experience looking to expand their skill set.As a key member of a small compliance team, you'll work closely with a compliance assistant, senior compliance lawyer, and the head of risk who...