Data Protection Officer

Global financing body are looking for a qualified Data Protection Officer to implement GDPR readiness and advise on all Data Protection issues within the business.

Client Details

Our client is a globally renowned financing body.

Description

• Provide legal advice in relation to all aspects of our clients compliance with data protection laws to the business and via support of the Legal team to ensure holistic specialised advice is provided to the business and avoid multiple contact points where appropriate including advising on:

• Customer facing data protection issues, data protection queries and the terms of the customer consent and other data protection aspects in customer agreements;

• Data protection aspects and clauses of supplier and partnership agreements;

• Subject Access Requests from customers or associates;

• Project related data protection matters;

• Event resolution and breach notifications;

• Third party intake process;

• Data Protection legal and regulatory developments; and

• Associate related data protection issues.

• Lead on the strategy for data protection compliance, liaising with the Legal & Compliance Leadership Team and Accountable Executives where appropriate.

• Lead on and build a strong relationship with the ICO including maintenance of registrations and managing the ICO complaints process taking into account the need for third parties to maintain their registrations where required. Lead and manage on relationship meetings and ICO visits.

• Manage the design, delivery and development of the Data Protection Work Programme (including Privacy Impact Assessment Annual Programme design and roll out) to ensure it comprehensively meets current business needs and evolves to provide clear added value. In particular, create and maintain a procedure to manage privacy impact assessments where appropriate including determining criteria to ascertain when it is appropriate to undertake a privacy impact assessment.

• Provide input to appropriate internal committees in relation to data protections risks and issues

• Act as primary conduit to outside counsel on data protection matters and ensure quality of advice provided to COEP by outside counsel including developing strong relationships with data protection counsel in outside firms.

• Assist the business with the creation and maintenance of relevant data protection registers to monitor and track data sharing arrangements, data retention policies, breach notification, ICO registrations and effective asset management and disposal.

• Proactively monitor changes to data protection legislation, communicating and managing changes as they apply to COEP and updating the Legal Roadmap (including co-ordination of lobbying and Capital One's response to industry consultations).

• Ensure controls which manage risks associated with Data Protection requirements are adequately designed, implemented and effective and manage assurance and monitoring arrangements as needed including (oversight of GRC monitoring results, ICTT testing on data protection matters, GRC compliance control reviews, ad-hoc compliance assurance reviews and complete compliance event severity assessments in GRC as needed).

Profile

• Ideally you're a qualified solicitor who has professional qualifications in data protection and/or compliance or is interested in gaining these.

• Proven experience of providing legal advice on data protection.

• Demonstrable experience of providing compliance advice, operational compliance matters, and running compliance programmes.

• Team work ethic and the confidence to work independently

• Ability to work in a fast-paced environment, manage multiple tasks effectively and meet deadlines.

• Sound retail lending operational experience.

• Project management experience / knowledge.

Job Offer

competitive