Data Privacy Manager

The Data Risk Manager will be responsible for embedding and deploying a Data Risk Framework across 1st and 2nd line teams in the business. This role will strengthen the data risk regime that enables the business to mature, evidence data capabilities, and mitigate data risk.

Applying policies and setting standard approaches to data risk

• Deploy the Data Risk Framework and work with 2nd line, data teams, IT teams, projects and the business to ensure it is successful
• Define standards, controls, metrics and guidance to be applied across data flows and datasets.

Supporting Compliance with Data Regulations such as DPA and GDPR

• Collate individual rights requests, such as Subject Access Requests (SARs)
• Collate information where a Data Breach occurs
• Ensuring PII data falling outside the Group's data retention criteria is deleted or obfuscated.

Providing Subject Matter Expertise and support to ongoing:

• Record of Processing Activities (RPA)
• Data Privacy Impact Assessment documentation (DPIA).
• Legitimate Interest Assessments (LIA's).
• Data Transfers Assessments

Data Risk Assessments

• Support business teams to assess their use of data and ensure the right level of controls are applied for the consistency and integrity of data to meet business need and mitigate data risks
• Oversee and report on the outputs of Data risk assessments
• Support data risk assessments during the change life cycle
• Maintain data risks in the risk registers and escalate where needed

Data Audit

• Maintain a collaborative relationship with Audit (3rd line of defence) and ensure data related Audit Actions are completed to agreed timescales.

Qualifications

What we're looking for

• Must have detailed understanding of data risk and controls required to mitigate.
• Excellent working knowledge of data regulations such a GDPR
• Excellent understanding and practical experience of implementing data risk across multiple stakeholders and roles.
• Must have experience of working on Data project/s
• Collaborative approach to working with data operational teams, developers, architects and subject matter experts alike, to establish the facts, and ensure good communication of requirements
• Excellent communication skills to articulate data and the associated benefits to a non-expert audience.
• Highly organised and Innovative SME able to deliver in a large Matrix organisation.
• Experience in running workshops with different business and technical stakeholders
• Must be able to handle complex and difficult queries or situations.
• Relationship and stakeholder management with experience of working professionally with a diverse group of stakeholders, managers, and subject matter experts, building positive and productive relationships
• Experience of working in an Agile environment with agile development capabilities and toolsets - Jira and Confluence
• Demonstrate accountability and ability to adapt and move quickly, against a deadline/changing deadline while maintaining quality.
• Any form of GDPR certification
• Understanding of Data Engineering and Data Ops concepts, processes and toolsets.
• Skills in data analysis (understanding macros, scripts, queries to profile data and determine its data quality)
• Exposure to and confidence in cloud computing concepts and data use cases