Data Protection Analyst

Job Description

Responsibilities (how we will measure success)

To provide support for all aspects of the Group’s Data Protection strategy and arrangements encompassing cultural, physical and technology elements throughout the business.

Working as part of the Group Data Protection Team, the post will operate systems and processes for management of privacy compliance, and in particular will: oversee maintenance of the central Register of Processing Activities (ROPA); advise stakeholders on completion of Data Protection Impact Assessments (DPIAs) and related assessment processes; manage and support of Data Subject Requests (DSRs).

The role will also coordinate membership, attendance and information for Data Protection forums, manage production of management information for the team and build the profile of the team through the business through effective communications and managing processes and service levels.

Tasks (what does the role do on a day-to-day basis)

• Working with Group services to maintain and update the central ROPA via a central management system;
• Work with Clusters and regions to support maintenance of local ROPAs
• Oversee use of personal data and advise on privacy processes for country and group-level compliance;
• Responding to requests for support and completion of DPIAs and client-facing RFPs;
• Responding to queries on data protection clauses in supplier- and client-facing contracts, for escalation within the team and to Group Legal;
• Monitoring and support for group-level Data Subject Rights Requests.

Key competencies for position and level (see Group Competency model)

• Understanding of core Data Protection concepts;
• Recent experience of working in a similar capacity managing compliance processes;
• Experience of working within a complex organisations and stakeholders;
• Experience of providing support for compliance processes, managing multiple priorities and ensuring that service levels are maintained by the team as a whole;
• Excellent interpersonal skills, comfortable working at all levels within an organisation and in a wide variety of situations;
• Relevant industry certification or willingness to work towards (e.g. IAPP CIPP/E, CIPT, CIPM, or Practitioner Certificate in Data Protection, or evidence of GDPR competency).

Key behaviours we expect to see

In addition to demonstrating our Group Values (Authentic, Bold, and Collaborative), the role holder will be expected to demonstrate the following:

• A people and client-focussed mindset.
• Self-motivating and able to work under own initiative.
• Hard-working, reliable, and supportive.
• Possesses a willingness to help develop the role and team in a rapidly changing environment.