Group Data Protection Officer
Location: Flexible on location with visits to our head office in Wimbledon as and when required.
Salary: Competitive
Contract Type: Permanent
We have a fantastic opportunity for a self-motivated and hardworking individual to join our Risk & Compliance team as Group Data Protection Officer.
The role will be responsible to develop, maintain and effectively implement the Group’s strategic approach to data privacy governance across countries where the group has an operating presence which currently covers the UK, Europe, US and Australia (closed book).
It will feature taking a group approach but in accordance with local data privacy laws, regulations and relevant codes of practice, providing practical advice and solutions within the Group’s business context and best practice.
Key Responsibilities:
Leadership & Culture
Senior manager responsibility for making sure that D&G, its employees, and agents, are aware of and comply with appropriate data privacy regulations. Provide ongoing advice on data privacy obligations.
Lead the Group’s strategic thinking on data privacy compliance, driving the standardization of data collection and handling systems, processes and documentation across jurisdictions and activities.
Together with the Group’s Chief Information Security Officer, assist in strategic leadership on information security matters to ensure compliance with data privacy laws and regulations and international security standards and privacy of data against unlawful access or loss. In addition, provide leadership when the Group’s data management procedures are invoked.
Assist senior management to introduce and maintain a data privacy culture throughout the Group and maintain visibility and consciousness of data privacy.
Drive data privacy awareness initiatives, embedding a culture of ethical business conduct and continuous improvement.
Governance & Policy
Define, implement, and monitor compliant data privacy governance solutions in a group context and at a local level across the Group’s operations.
Monitor compliance with GDPR and other applicable data privacy laws.
As part of the strategic focus, keep up to date with privacy developments and governance strategies for data management and use, implementing a continuous improvement programme to raise the Group’s privacy standards.
Develop and maintain relevant data privacy policies and procedures.
Prepare data privacy MI and reporting for day-to-day oversight purposes and executive management committees and boards.
Serve as the point of contact for group data privacy supervisory authorities.
Data privacy risk management
Implement a documented, Group-wide privacy risk management framework, conduct risk assessments, maintain and update a privacy risk register with documented mitigations and derogations.
Maintain a network of local managers/contacts in international offices who will assist in data privacy implementation.
Selling standards
Work with the business and clients to ensure that the Group’s selling practices (point-of-sale, telephone, internet & mail) comply with standards of privacy disclosures and consents, and the data requirements of the Group.
Training & Awareness
Design and deliver training on data privacy across the Group.
Ensure senior management and staff are regularly informed on privacy developments relevant to the Group.
Maintain a privacy knowledge base of relevant laws, guidance, and advice across all jurisdictions, including horizon scanning and maintaining data privacy intranet site.
Monitoring and audits
Maintain a data privacy monitoring programme covering audits of key business processes and third parties.
Assist in handling audits by outside agencies such as clients or regulators.
Advice
Provide expert advice to D&G senior management, employees, and agents across different countries on data privacy requirements, drawing on expertise from local advisors when necessary.
Provide expert advice in relation to the data privacy issues in Client and Supplier contracts, including issues relating to data ownership.
Provide expert advice in relation to key Group projects involving the use of data.
Ad hoc
Oversee processes to ensure prompt and accurate compliance with notification requirements.
Oversee processes to ensure prompt and accurate fulfillment of subject access requests.
People
Manage, mentor, and develop a team of data privacy professionals fostering a collaborative and high-accountability culture, and manage team resourcing, succession planning, and skills development in partnership with HR and Learning & Development functions.
Skills and experience required:
Proven experience of developing and evolving data privacy and data quality strategies across multiple geographies.
Excellent relationship management and influencing skills.
Strong written and verbal communication skills.
Highly organised, with a flexible approach to work.
Ability to work independently and manage multiple priorities.
Strong understanding of data processing operations and IT systems.
Excellent working knowledge of data privacy laws and regulations, in an international context as well as GDPR privacy collection and management.
Proven experience of interacting with data privacy supervisory bodies.
Experience of direct marketing operations and the relevant rules and regulations.
Leading data privacy improvement initiatives / projects at corporate level.
Implementation of data privacy monitoring programmer covering collation, storage and processing of personal data by both the company and its agents.
We offer lots of great benefits! Some of which include:
Competitive salary and annual discretionary bonus
25 days annual leave plus bank/public holidays, as well as an annual option to buy up to 5 additional days of annual leave
Training opportunities as well as clearly defined career progression
Health cash plan – employer funded cover to enable you to claim money back on essential healthcare costs, including dental, optical, physiotherapy and many more. Cover also includes unlimited access to a 24/7 virtual GP service
Attractive company pension scheme
Life assurance – employer funded cover of 4x basic salary
Dedicated online benefit portal offering access to saving and lending facilities, financial wellbeing and support services:
Salary Finance – access to savings and borrowing through payroll
Car Leasing – access to a carbon neutral salary sacrifice car leasing scheme, with an all-inclusive monthly cost covering all charge, taxes, insurance, repairs and maintenance on a range of brand-new vehicles
Travel Loans – interest free loans to help spread the cost of annual travel tickets
Cycle to Work – tax efficient bike and cycling equipment worth up to £1,000
Health & Wellbeing – discounted gym membership, online virtual workout sessions, online culinary classes
OnHand – Giving you the opportunity to be an Eco & Social volunteer via a handy app. Volunteer individually or in groups to get involved in Youth Mentoring, Food Poverty, Homelessness & Elderly help.
Employee Assistance Programme – specialist advice and support on issues such as finance, relationships, illness and family issues
Free Domestic & General protection plan – one free plan each year with access to discounted rates of up to 50% on additional plans, including referrals for family and friends
Employee discounts – with a range of discounts for 100s of online and high street retailers
Domestic & General are an equal opportunities employer which means we treat people fairly. We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status.
Please note that we have a thorough referencing process, which includes criminal record checks.
At Domestic & General, we are proud of our 100-year legacy and excited about our future growth plans. We are expanding our horizons, entering new markets and territories internationally and we need your expertise to help us on the journey.
