Data Protection Manager

TN United Kingdom; London; On-site; GBP 125,000 - 150,000; Full time

Job summary

An established industry player is seeking a skilled Data Protection Officer to develop and implement data protection policies compliant with laws. This role involves conducting audits, advising management on data security, and training staff. The ideal candidate will have a strong background in data protection laws like GDPR and CCPA, with excellent communication and analytical skills. Join a dynamic team where your expertise will help shape the organization's data protection strategy and ensure compliance in a rapidly changing regulatory landscape.

Qualifications

• 5+ years of experience in data protection or privacy roles.
• Strong understanding of GDPR, CCPA, and IT security.

Responsibilities

• Develop data protection policies and conduct audits for compliance.
• Serve as the main contact for data protection queries and regulatory authorities.
• Deliver training to staff and manage data protection impact assessments.

Skills

Data Protection Laws

GDPR

CCPA

Communication Skills

Analytical Skills

Problem-Solving Skills

IT Security

Data Management Systems

Education

Bachelor’s degree in Law

Master’s degree in Law or related field

Professional certification (CIPP/E, CIPM)

Job description

Social network you want to login/join with:

Responsibilities

• Develop and implement data protection policies and procedures in compliance with relevant data protection laws applicable to Ogier.
• Conduct and support regular data protection audits and risk assessments to identify vulnerabilities and ensure compliance with data protection laws and policies.
• Serve as the primary point of contact between Ogier and regulatory authorities on matters relating to data protection.
• Provide expert advice and guidance to senior management and other departments on data protection matters, including data processing activities and data security practices.
• Liaise with external professional advisers (including legal advisers) to the Ogier business, as necessary.
• Develop and deliver data protection training to staff at all levels to raise awareness and ensure business-wide compliance.
• Manage and respond to internal and external data protection queries (such as data subject access requests).
• Support the implementation of any data protection related projects.
• Monitor and analyse changes in data protection laws and regulations, and update internal policies and procedures, as necessary.
• Work closely with IT, Risk and the Information Security teams to ensure that technical and organisational data protection measures are in place and effective.
• Oversee and manage data protection impact assessments for new and existing projects.
• Maintain comprehensive records of all data processing activities conducted by the company, as required by law.
• Potential development for Group Data Protection Officer role, for the right candidate.

Skills, Knowledge and Expertise

• Bachelor’s degree in Law, Information Technology, or a related field. A Master’s degree or relevant professional certification (e.g., CIPP/E, CIPM) is highly desirable.
• Proven experience (minimum of 5 years) in a data protection or privacy role, ideally within a legal, compliance, or IT security setting.
• In-depth knowledge of data protection laws and practices, including GDPR, CCPA, and other relevant legislation.
• Strong understanding of information technology and data management systems.
• Excellent communication skills, both written and verbal, with the ability to explain complex legal requirements to non-specialists.
• Strong analytical and problem-solving skills, with a detail-oriented approach.
• Ability to work independently and as part of a team, with a proactive and collaborative attitude.
• High level of integrity and discretion in handling confidential information.
• Supporter of change with the ability to adapt to the continual roll-out of innovative tools and processes.
• Supportive of and able to demonstrate agile and flexible working.
• Ability to consider organisation-wide implications when making decisions.