Business Compliance Analyst

We’re Ocado Retail. We’re the people powering Ocado.com, the world’s largest online grocer, and Zoom by Ocado, our almost-as-fast-growing, same-day grocery service. As the world’s biggest and best online-only grocer, we work tirelessly to bring more of what matters to our customers: unbeatable range, fair value, and effortless convenience.

We’re an exceptional and mighty bunch of colleagues who are inspired by our three awesome values: Always be curious, Bring your best self, and Challenge what's possible.

We have ambitious plans and vision to never-stop making our customers' lives better, by delivering the supermarket of tomorrow, today.

The Role/Profile

As a Business Compliance Analyst, you will be responsible for supporting the compliance team in delivering their core accountabilities, with a strong focus on our Data Protection obligations and our information security programme, in particular vendor risk management.

Supporting the Information Security Compliance Manager in delivering core information security and data protection compliance accountabilities for the business. You will be working across the various departments of the organisation to ensure widespread understanding and application of relevant data protection and information security compliance with legal, regulatory, contractual, and any certification obligations. This includes supporting colleagues, and working with functional teams to ensure they follow our processes and practices.

You will support the Data Protection Officer and Information Security Compliance Manager in advising on and implementing governance measures, to ensure Ocado Retail data is at all times secure, preventing any breach of confidentiality, integrity or availability of data.

Key Responsibilities

• Assist business partners in completing the appropriate data protection and information security assessments and raising any risks to our compliance with law and regulations.
• Drive an information security culture within the organisation, by monitoring the completion of annual refresher programmes and trainer-led sessions to colleagues.
• Assist the team in monitoring wider business projects and activities in relation to possible compliance risk.
• Administer the Vendor Risk Management programme with functional teams across the organisation, ensuring timely completion of documentation.
• Assist with the maintenance of the information security policy suite together with guidance documents and procedures, controls or measures to ensure data remains secure and processes compliant.
• Identify gaps in business procedures, controls, and measures, and work with functional teams to develop the necessary remediation steps to ensure compliance.
• Support the team with the implementation and maintenance of any information security accreditations.
• Monitoring of information risk treatment plans.
• Maintain a record of incidents together with their resolutions and lessons learned.

Key skills

• The ideal candidate will have an understanding of data protection and information security assurance.
• They will be customer focused and come with a hands-on attitude.
• This is a 2nd line of defense role where the suitable candidate must have experience working within a fast moving adaptable environment.
• We are looking for a candidate who is self-motivated and able to work effectively and efficiently with a good attention to detail. Excellent communication skills and the ability to build strong relationships are a prerequisite.
• An understanding of the three lines of deference module and the role of data protection and information security 2nd line governance, risk, and compliance
• Awareness of information security certifications including Cyber Essentials, ISO 27001, 27002, etc. Data Protection Act 2018, UK GDPR and PECR
• Knowledge of PCI DSS advantageous
• Knowledge of information security monitoring vulnerability and threat detection advantageous
• Strong ability to balance commercial needs with legal, regulatory and contractual requirements.
• A collaborative mindset and excellent interpersonal and communication skills
• Ability to promote a data protection culture and embedding compliance, including educating other colleagues on the importance of data protection and information security
• Possess integrity, professional ethics, and sound judgement in managing risks
• Ability to manage and create reports and provide updates and statistical figures when required

What We Offer You
We want our colleagues to feel supported and secure here at Ocado Retail, which is why we have a great range of useful benefits for them to scoop up - and they’re now available to easily learn about using our new platform ‘Pick ‘n’ Mix’. Our flexible benefits range from tasty lifestyle discounts to trusty private medical insurance.
These benefits can also be customised so you can pick and choose to best suit your lifestyle.

Core Rewards

• Annual bonus scheme - maximum opportunity dependent on the role
• 26 Days Annual Leave plus bank holidays
• Up to 7% matched pension contributions (e.g. 7% from you, 7% from us)
• 50% income protection
• 4x salary life insurance
• 15% Ocado.com discount
• 20% Marks and Spencer discount
• Company-paid private medical insurance for colleagues with the opportunity to add partners/children at corporate rates and Digital GP service
• Hybrid Working (2-3 days a week connecting, collaborating, and learning together with our colleagues)

Health & Wellbeing

• Private Medical Insurance
• Critical Illness
• DigiCare+
• Healthcare Cashplan
• Health Assessment
• Dental Insurance
• Eyecare Vouchers
• Digital GP
• Mental Health

Flexible Benefits

• Tax-efficient electric vehicle leasing scheme
• Access to a retail discount platform, providing discounts and cashback

On-site at Apollo

• Free onsite parking and free shuttle service from Hatfield station
• Regular socials, including Town Halls and Mixers & our ORL Summer Party
• ‘The Fig’ (serving breakfast, snacks, and lunch), coffee cart, as well as small kitchens (with unlimited refreshments and fresh fruit available every day) and vending machines on each floor.
• As part of our inclusive nature, help make change within the business and join any of our Networks

Travel to Apollo

We have free onsite parking at Apollo Court, as well as a free shuttle bus service that runs frequently from Hatfield Station - just remember to tell the driver ‘Apollo Court’ as the shuttle also drops at Ocado Groups Head Office!

Driving: Apollo Court, 2 Bishop Square, Hatfield Business Park, Hatfield, Hertfordshire, AL10 9NE

Train: Hatfield station is accessible from mainline routes from London Kings Cross, London St Pancras, or Moorgate.

A little bit more about us

Our business is a joint venture between Ocado Group and M&S. It’s a successful combination of award-winning customer service and unrivaled customer data; world-leading technology and logistics from Ocado Group, and unrivaled product development from M&S.

Equal Opportunity Employer

Ocado Retail Ltd is an equal opportunities employer and as such makes every effort to ensure that all potential employers are treated fairly and equally, regardless of their sex, sexual orientation, marital status

Recruitment Privacy Notice

Ocado Retail Limited will process and store your personal information in accordance with our Recruitment Privacy Notice. By submitting your CV/resume and application information, you confirm that you have read and understood this privacy notice.