Data Protection Administrator

AON; Bromsgrove; On-site; GBP 28,000 - 42,000; Full time

Job summary

NFP is hiring a Data Protection Administrator to support our Technology team in the UK. You will manage data protection policies, handle subject access requests, DPIAs, and data breach incidents, and guide staff on compliance with UK DPA 2018 and GDPR.

You will work with stakeholders to map data, assess risks, and ensure ongoing regulatory alignment. Prior experience and a relevant certification are desirable.

Qualifications

• Thorough knowledge of the UK Data Protection Act 2018 and EU GDPR.
• Excellent communication and interpersonal skills; explain complex data protection concepts.
• Strong analytical and problem-solving skills to assess and mitigate risks.
• High attention to detail with ability to meet deadlines.
• Minimum of two years of experience in data protection or similar role.
• Desirable but not essential: data protection certification such as CIPP, CDPSE, or similar.

Responsibilities

• Develop, implement, and review data protection policies to align with UK DPA 2018 and GDPR.
• Monitor and audit compliance of processing activities.
• Perform data protection due diligence for new acquisitions.
• Conduct data mapping to identify risk areas and implement protections.
• Oversee DPIAs and PIAs for projects and processes.
• Provide training on data protection principles to staff and stakeholders.
• Act as main contact for data protection queries internally and externally.
• Evaluate compliance of third-party vendors and partners.
• Manage data subject access requests and data breach responses promptly.
• Prepare reports on data protection activities and incidents for senior management.
• Liaise with ICO and other authorities as required.

Skills

Data protection knowledge

GDPR knowledge

Data mapping

DPIA

PIA

Data breach handling

Communication

Analytical skills

Attention to detail

Stakeholder engagement

Job description

We’re hiring for a Data Protection Administrator to support our growing Technology team!

To support our growth in the UK and Ireland, we’re seeking a dedicated Data Protection Administrator to ensure compliance with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). You will be responsible for managing and maintaining our data protection policies, procedures, and records, as well as providing advice and guidance to staff and stakeholders on data protection matters. You will also handle data subject access requests, data breach incidents, and data protection impact assessments.

We’re looking for someone with:

• A thorough knowledge and understanding of the UK Data Protection Act 2018 and the EU GDPR, as well as other relevant laws and regulations
• Excellent communication and interpersonal skills, with the ability to explain complex data protection concepts to different audiences
• Strong analytical and problem-solving skills, with the ability to assess and mitigate data protection risks
• High attention to detail and accuracy, with the ability to work under pressure and meet deadlines
• A minimum of two years of experience in data protection or a similar role
• A certification in data protection, such as the BCS Practitioner Certificate in Data Protection, the IAPP Certified Information Privacy Professional (CIPP), or the ISACA Certified Data Privacy Solutions Engineer (CDPSE), is desirable but not essential

Using these skills, you’ll be:

• Developing, implementing, and reviewing data protection policies, procedures, and processes in line with the UK Data Protection Act 2018 and the EU GDPR
• Monitoring and auditing the compliance of our data processing activities with the data protection legislation and our internal policies
• Performing data protection due diligence requirements reviews on new business acquisitions
• Conducting data mapping exercises and classifying data to identify areas of risk and ensure appropriate protection measures are in place
• Overseeing and conducting DPIAs to assess and mitigate risks associated with data processing activities
• Conducting and overseeing Privacy Impact Assessments (PIAs) for new projects, systems, or processes involving the processing of personal data
• Providing training and awareness to staff and stakeholders on data protection principles, rights, and obligations
• Acting as the main point of contact for data protection queries and issues, both internally and externally
• Evaluating and managing data protection compliance of third-party vendors and partners
• Managing and responding to data subject access requests, data breach incidents, and data protection impact assessments in a timely and effective manner
• Preparing and delivering regular reports on data protection activities, compliance status, and incidents to senior management
• Liaising with the Information Commissioner's Office (ICO) and other relevant authorities as required

We’re committed to creating an inclusive and accessible recruitment process. If you require any reasonable adjustments at any stage of the application or interview process, please let our Talent Team know – we’ll do our best to support you. Please email [e-mail] for more on this.

Who is NFP?

With over 600 people in the UK and Ireland and over 8,000 employees worldwide, NFP is part of the Aon group and specialise in helping businesses in four core areas:

• Insurance (helping them manage key risks)
• Health and safety (supporting them to create a safer workplace for their employees)
• Employee benefits (helping them reward their people more effectively)
• HR, people and talent (supporting employers and their people to thrive through changes and challenges)

What you’ll love about working here

• working in a dynamic, fast-paced organisation in an exciting industry
• the opportunity to do globally impactful work from day one
• learning from industry and business line specialists with decades of experience
• a huge variety of projects to work on and challenges to solve
• our People First culture, which illustrates our commitment to your wellbeing and development, not just as an employee but as a human being
• a rich suite of employee benefits and out-of-work perks

#NFPUK

2588892