Data Protection Advisor

STRABAG SE; London; Hybrid; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking an experienced Data Protection Advisor to join their London team. This role offers an exceptional opportunity to ensure compliance with UK GDPR and the Data Protection Act 2018 while managing privacy-related risks. You will be responsible for developing policies, conducting training, and working closely with various teams to enhance data protection practices. The company fosters a supportive environment with opportunities for professional growth and a modern workplace, including hybrid working options. If you're passionate about data protection and eager to make a significant impact, this position is perfect for you.

Benefits

Market-oriented remuneration

Feedback-oriented management culture

Access to further training opportunities

Modern workplace

Hybrid working options

Qualifications

• Certified in CIPP/E or CIPM with strong legal experience.
• Proven experience in data protection and IT law compliance.

Responsibilities

• Ensure compliance with UK GDPR and manage data protection risks.
• Deliver training and raise awareness on data protection.

Skills

CIPP/E or CIPM certification

Detailed knowledge of UK GDPR

Experience in IT agreements

Proven DPO or DPM experience

Excellent file management skills

Strong communication skills

Attention to detail

Teamwork

Knowledge of ISO 27001 and 27701

Pragmatic approach to legal advice

Education

Good academic credentials

Post-qualification experience (2-5 PQE preferred)

Tools

SharePoint

Job description

This is an exceptional opportunity to grow your career and develop your experience working on high value and complex matters, whilst delivering the highest quality service for an international construction business.

What matters to us

• You are certified in CIPP/E or CIPM.
• Good academic credentials and post-qualification experience (2-5PQE preferred).
• In-house (legal) experience or strong law firm experience supporting large corporations (both in a legal and non-legal capacity).
• Strong commercial understanding, and excellent interpersonal skills.
• Right to work in the UK.

Skills:

• A recognised data protection qualification from a reputable provider.
• Detailed working knowledge of privacy related legislation and UK GDPR as it applies to data protection practice.
• Experience in any of IT agreements, software licensing, data protection, intellectual property would be desirable.
• Proven DPO or DPM experience in a commercial business environment.
• Excellent file management skills, with a good working knowledge of SharePoint being advantageous.
• Strong communication skills, both written and verbal.
• Excellent attention to detail.
• An ability to work well with others – irrespective of their role or experience of data protection.
• Working knowledge of ISO 27001 and 27701 beneficial, but not essential.
• High level of comprehension and pragmatic approach: You will have a pragmatic and solution-based approach in your legal advice to our internal clients and you are willing and able to support in negotiating contracts. You will also have an understanding of the economic and technical implications of the advice being provided.
• You are a self-motivated individual with a pro-active approach. You have a thirst for action and personal responsibility and also enjoy communicating with internal clients as well as colleagues. Team spirit is crucial.

Your contribution to our company

CML Construction Services Limited, being an integral part of STRABAG UK Limited, is looking to appoint an experienced Data Protection Advisor to join their team in London.

About the role:

Responsible for data privacy compliance and advice across STRABAG UK, the Data Protection Advisor will ensure compliance with the UK GDPR and the Data Protection Act 2018. They will also be responsible for identifying privacy-related risks and the management of the same, together with developing policy and compliance documentation and raising awareness across the business.

Below you will find the tasks you will be entrusted with, focusing on Data Protection and IT law:

• Supporting the business to ensure compliance with the UK GDPR, the Data Protection Act 2018 and other applicable data protection laws and regulations (including the Data Protection and Data (Use and Access) (DUA) Bill when it becomes law).
• Monitoring developments in relevant law, regulation, policy, guidance and codes of practice.
• Enhancing existing policies, plans and procedures, and creating new ones where appropriate. Updating and maintaining records of processing.
• Managing data protection impact assessments and addressing the risks identified.
• Delivering training and raising awareness.
• Working closely with the information security and people teams to ensure compliance.
• Managing any data breaches, identifying root causes, mitigating risks and preventing reoccurrence.
• Supporting STRABAG’s audit programme with audits related to data protection compliance.
• Working closely with STRABAG Groups data team.
• Provide in-house advice on privacy, data-sharing, and EU AI Act compliance, assessing implications for new product offerings. Draft, negotiate, and review commercial agreements with a focus on information law clauses, ensuring alignment with EU DSA regulations.

What you stand to gain

• Look forward to an exciting position with interesting and challenging tasks in a team full of expertise and passion for the profession.
• We offer support and opportunities to develop and grow within our team according to your individual career goals.
• Enjoy a pleasant working atmosphere in an internationally active company.
• Benefit from a market-oriented remuneration structure and a feedback-oriented management culture.
• Work in a modern, fully equipped workplace in our London office, including the option of hybrid working.
• Access to practice-oriented further training opportunities.
• Unique opportunity to benefit from the diverse fields of activity within a globally active group.

This happens after the successful application:

1. Screening of applications – careful review and evaluation of submitted documents.
2. Decision, whether to invite an applicant to an interview.
3. Getting to know the candidate in a virtual or personal setting – the number of interviews may vary depending on the position.
4. Welcome to STRABAG SE – clarifying the offer and the final details regarding the candidate’s entry.