The Role..

We are looking for a Data Protection Executive to join our UK&I Data Protection team.

The successful candidate will have a strong interest and desire to qualify in data protection and privacy to obtain a strong knowledge of GDPR, ePrivacy and other privacy regulatory frameworks.  The individual will be capable of working on their own initiative and delivering results.  They will have collaboration skills working with and through colleagues and peers.  The role will require working cross functionally and cross jurisdictionally.   

Reporting to the Senior Data Protection Executive, the Data Protection Executive is responsible for ensuring appropriate processes, systems and structures are in place to manage compliance with the UK&I Division's data protection obligations. The role has responsibility for supporting the delivery of end to end processes, monitoring compliance, reporting compliance key controls and for instilling a strong data protection culture within the Division. The role will also support the Head of Data Protection & DPO in managing data protection related requests or projects as they arise.  

What We're Looking For..

• Managing subject right requests and customer queries/complaints. Maintaining procedures and SLAs for managing data access requests, right to be forgotten requests and recording all relevant information on the internal database.
• Liaising with other departments to collect all data necessary to meet SLAs. Building knowledge of SAR exemptions to ensure exemptions are applied correctly. 
• Continuously reviewing subject rights requests procedures to ensure adherence to all requirements and to drive continuous improvement in existing processes.
• Executing GDPR compliance work including GDPR compliance activities, data protection impact assessments, data mapping services to aid in addressing risk management issues that comply with GDPR requirements
• Writing briefs on above topic areas. Building a solid knowledge of data protection to become a Subject Matter Expert in the area
• Contributing to internal GDPR-related projects, to ensure organisational compliance with all processes and procedures, including internal training of staff interfacing with Data Protection.
• Work closely with other stakeholders within the business units, including IT, Online, Retail and Operations to improve internal controls around data protection.
• Continuous monitoring of external and internal business environment to ensure UK&I data protection responsibilities are understood and internal controls are amended to support compliance if necessary. 
• Manage and administer the data protection software management tools
• Develop materials for and manage the rollout of training and awareness initiatives across specific focus groups.

What You'll be Doing..

• Desire to professionally qualify (if not already qualified) through the International Association of Privacy Professionals (IAPP) in Data Protection Law (CIPP/e).
• Strong process, technical and analytical skills, combined with strong commercial acumen 
• A keen problem solver with the ability to set objectives and priorities 
• Strong presentation and communication skills: the ability to accurately identify key issues and communicate them broadly 
• High energy and drive, and flexible enough to work in an entrepreneurial, dynamic and changing environment and the resilience to challenge/be challenged.