About this role
Data Protection Officer - Contract London - 3 days per week onsite £550 per day - Inside IR35 3-month initial contract
We are working with a well-established public facing organisation are looking for an experienced Data Protection Officer to join them on an initial 3-month contract.
Reporting into the Head of Corporate Compliance & Assurance, you will take the lead on data protection, GDPR and privacy compliance across the business, providing expert advice and guidance to senior stakeholders and ensuring robust governance and risk controls are in place.
This is a hands-on role requiring someone who can operate at both strategic and operational level, managing the organisation's Data Protection Framework while supporting the wider Information Security and Compliance function.
Key responsibilities:
Lead and oversee the organisation's Data Protection and Privacy frameworkProvide expert advice on GDPR, data protection legislation and Privacy by DesignAdvise senior leadership on their responsibilities as a Data Controller and/or ProcessorMonitor compliance with Data Protection and Data Retention policies, standards and proceduresManage and oversee data protection incidents, breaches, complaints, Subject Access Requests and Rights of Access requestsLead Data Protection Impact Assessments (DPIAs) for projects and privacy-sensitive activityMaintain and support Registers of Processing Activities (ROPA)Act as the key point of contact for Data Protection Authorities and regulatory mattersProvide guidance on data protection risks and appropriate mitigation controlsConduct and oversee third-party data protection due diligence and support supplier contract negotiationsMaintain and develop the Data Protection Framework in alignment with GDPR and ISO 27001Work closely with Information Security colleagues to ensure appropriate privacy controls are incorporated across systems, applications and infrastructureMonitor upcoming changes to privacy legislation and advise the business on their potential impactProvide regular reporting around Data Protection and Data Retention compliance Requirements:
Strong experience operating within a Data Protection Officer, Privacy or senior Data Protection positionIdeally 5+ years' experience working across privacy and data protectionExpert knowledge of UK GDPR, Data Protection legislation and Privacy by DesignStrong experience managing DPIAs, ROPAs, SARs, data breaches and regulatory complianceBCS Data Protection, CIPP/E or equivalent professional qualificationStrong knowledge of Information Security Management Systems and ISO 27001Experience developing and maintaining data protection policies, standards and governance frameworksComfortable advising and influencing senior stakeholders and management teamsExperience managing third-party supplier risk and data protection due diligence