Data Protection Advisor

STRABAG SE; London; Hybrid; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a Data Protection Advisor to join their team in London. This role offers a unique opportunity to ensure compliance with UK GDPR and the Data Protection Act 2018 while managing privacy-related risks. You will be responsible for developing policies, conducting training, and working closely with various teams to enhance data protection practices. This innovative firm provides a supportive environment for professional growth, a modern workplace, and options for hybrid working. If you are passionate about data privacy and eager to make a significant impact, this role is perfect for you.

Benefits

Market-oriented remuneration

Feedback-oriented management culture

Practice-oriented further training opportunities

Pleasant working atmosphere

Modern workplace

Qualifications

• 2-5 PQE preferred with in-house or strong law firm experience.
• Proven experience in data protection and compliance roles.

Responsibilities

• Ensure compliance with UK GDPR and Data Protection Act 2018.
• Manage data protection impact assessments and training.

Skills

CIPP/E or CIPM certification

Data protection legislation knowledge

IT agreements experience

Proven DPO or DPM experience

Excellent file management skills

Strong communication skills

Attention to detail

Teamwork ability

Working knowledge of ISO 27001 and 27701

Education

Recognised data protection qualification

Good academic credentials

Tools

SharePoint

Job description

This is an exceptional opportunity to grow your career and develop your experience working on high value and complex matters, whilst delivering the highest quality service for an international construction business.

• You are certified in CIPP/E or CIPM.
• Good academic credentials and post-qualification experience (2-5PQE preferred).
• In-house (legal) experience or strong law firm experience supporting large corporations (both in a legal and non-legal capacity).
• Strong commercial understanding, and excellent interpersonal skills.
• Right to work in the UK.

Skills:

• A recognised data protection qualification from a reputable provider.
• Detailed working knowledge of privacy related legislation and UK GDPR as it applies to data protection practice.
• Experience in any of IT agreements, software licensing, data protection, intellectual property would be desirable.
• Proven DPO or DPM experience in a commercial business environment.
• Excellent file management skills, with a good working knowledge of SharePoint being advantageous.
• Strong communication skills, both written and verbal.
• Excellent attention to detail.
• An ability to work well with others – irrespective of their role or experience of data protection.
• Working knowledge of ISO 27001 and 27701 beneficial, but not essential.
• High level of comprehension and pragmatic approach: You will have a pragmatic and solution-based approach in your legal advice to our internal clients and you are willing and able to support in negotiating contracts. You will also have an understanding of the economic and technical implications of the advice being provided.
• You are a self-motivated individual with a pro-active approach. You have a thirst for action and personal responsibility and also enjoy communicating with internal clients as well as colleagues. Team spirit is crucial.

CML Construction Services Limited, being an integral part of STRABAG UK Limited, is looking to appoint an experienced Data Protection Advisor to join their team in London.

About the role:

Responsible for data privacy compliance and advice across STRABAG UK, the Data Protection Advisor will ensure compliance with the UK GDPR and the Data Protection Act 2018. They will also be responsible for identifying privacy-related risks and the management of the same, together with developing policy and compliance documentation and raising awareness across the business.

Below you will find the tasks you will be entrusted with, focusing on Data Protection and IT law:

• Supporting the business to ensure compliance with the UK GDPR, the Data Protection Act 2018 and other applicable data protection laws and regulations (including the Data Protection and Data (Use and Access) (DUA) Bill when it becomes law).
• Monitoring developments in relevant law, regulation, policy, guidance and codes of practice.
• Enhancing existing policies, plans and procedures, and creating new ones where appropriate. Updating and maintaining records of processing.
• Managing data protection impact assessments and addressing the risks identified.
• Delivering training and raising awareness.
• Working closely with the information security and people teams to ensure compliance.
• Managing any data breaches, identifying root causes, mitigating risks and preventing reoccurrence.
• Supporting STRABAG’s audit programme with audits related to data protection compliance.
• Working closely with STRABAG Groups data team.
• Provide in-house advice on privacy, data-sharing, and EU AI Act compliance, assessing implications for new product offerings. Draft, negotiate, and review commercial agreements with a focus on information law clauses, ensuring alignment with EU DSA regulations.

We offer support and opportunities to develop and grow within our team according to your individual career goals. Enjoy a pleasant working atmosphere in an internationally active company. Benefit from a market-oriented remuneration structure and a feedback-oriented management culture. Work in a modern, fully equipped workplace in our London office, including the option of hybrid working. Access to practice-oriented further training opportunities. Unique opportunity to benefit from the diverse fields of activity within a globally active group.