Data Privacy and Governance Consultant

To support the DPO with all data protection matters, including assurance and governance work. This role will be business facing to assist with all elements of data governance and protection, including advising on the use of systems and how data is stored and shared across the different operations.

Responsibilities

• Assist in the completion of data protection and governance assurance work to ensure SBG is complying with its internal policies and procedures pursuant to the UK GDPR and the Data Governance Framework.
• Support the DPO in emphasising the importance of data security, supporting data owners and stewards in their role and responsibilities.
• Maintain Information Commissioners’ Office data controller registrations.
• Managing end-to end processes for data subject access requests (DSARs).
• Assist in ensuring Data Protection policies and procedures are up-to-date, risk-based and fit-for-purpose.
• Develop Data Protection training material and contribute to awareness campaigns.
• Support in the development of robust Data Risk Assurance to monitor the effectiveness of policies and procedures and the organisations’ compliance with them.
• Conduct reviews of Data Protection Impact Assessments (DPIAs and Legitimate Interest Assessments (LIAs).
• Support the review and completion of Registers of Processing Activity
• Mapping of systems and data flows to ensure governance controls are in place
• To undertake ad hoc projects and duties as and when required, to support the needs of the business or to achieve departmental objectives.

Critical behaviours required

Personal profile

Qualifications required 

Essential

• GCSE (or equivalent) passes in Maths and English
• Holds a recognised Data Protection qualification.

Experience required 

Essential

• Ability to work independently & manage time effectively.
• Takes ownership of issues and sees them through to resolution.
• Ability to build strong and effective working relationships with Stakeholders.
• Attention to detail and ability to deliver high quality written work.
• Ability to assess the impact and relevance of issues and articulate them in a clear and precise manner whilst ensuring a commercial approach is maintained.
• Effective oral and written communication skills.
• At least 2 years’ experience in a Data Protection or similar compliance role.

Our Expectations

Our Approach to Risk Management

• You will require an awareness of operational and regulatory risk, which may impact on SBG. You will be responsible for reporting to their line manager any risk which may impact on the business.

Three Lines of Defence Risk Management Model

• You will be required to deliver your role competently and comply with the relevant standards and procedures, ensuring that SBG deliver a service where suitable advice is given to the end consumer, which is adequately recorded and ultimately promotes good customer outcomes. This can either be through direct influence or in a support services capacity.

The Consumer Duty Principle

• You will be required to highlight to your line manager procedures and processes that may impact on SBG’s ability to deliver good outcomes for retail customers and/or may lead to foreseeable harm. Where possible and relevant to your department, put forward suggestions that could positively impact the outcomes achieved by retail customers.

Information Security

• You will need to be aware of all information security principles, policies and procedures and ensure these are followed on a day-to-day basis. You will be required to remain vigilant at all times and report any security concerns, suspicions and/or breaches in a timely manner.

SBG’s 6 Star Service Delivery

• You will need to demonstrate an understanding of what 6-star service delivery means in your role. This will be evidenced through your day-to-day behaviours and performance measured against your team’s 6-star service objectives.