Data Protection Officer

Harvey Nash Plc; City of Edinburgh; Hybrid; GBP 24,000 - 33,000; Full time

Job summary

Harvey Nash Plc is seeking a Data Protection Officer on a 23-month contract with outside IR35. The role is hybrid in Edinburgh, with 3-4 days per week on site and an ASAP start. Day rate is GBP 156.29.

You will support the ADPO in data protection activities, data mapping, SAR/Erasure management, and policy development, while ensuring regulatory timelines and training delivery across teams.

Qualifications

• Working knowledge of data protection legislation and handling of sensitive personal data.
• Strong communication and interpersonal skills to work with teams.
• Strong analytical ability to interpret diverse information and support decisions.
• Excellent organisational and planning skills to manage multiple priorities across teams.

Responsibilities

• Support the ADPO through DP trackers and workflows; assist with data mapping and audits.
• Help manage Data Subject Access Requests and Erasure requests within statutory timelines.
• Administer the Data Protection mailbox and support email security guidance with Cyber Security.
• Contribute to data protection policy development and ensure timely reviews and updates.
• Support training and awareness initiatives across teams and transfer of records.

Skills

DP knowledge

Communication

Analytical skills

Organisational skills

Job description

Data Protection Officer | 23 Month Contract | (Outside IR35) | Hybrid, 3-4 days pw Edinburgh| Starting ASAP

Day Rate: GBP156.29

About the role:

• Support the Assistant Data Protection Officer (ADPO) through the completion and maintenance of relevant DP trackers and workflows;
• Support the ADPO with the development and maintenance of the clients data map and relevant audit procedures; this will include support and guidance to internal teams;
• Work with the ADPO to ensure Data Subject Access Requests (SARs) and Erasure requests are managed and responded to in line with statutory timelines, with responsibility for the upkeep of workflows and the record management systems to evidence full life cycle of each SAR;
• Responsible for the day-to-day management of the Data Protection mailbox;
• Provide guidance and support in regards email security, eg, phishing, liaising with colleagues in Cyber Security, where required;
• Contribute to the development of data protection policy, procedure and guidance; ensuring timelines, eg, annual review dates, are actioned in good time;
• Keep up to date with relevant legislation, policies and procedures, to ensure guidance and support provided to Inquiry teams is current and accurate;
• Provide input and support to the ADPO in the development of training and awareness of Data Protection across the various teams;
• Support the ADPO in the work of the transfer of records

Essential Criteria

• A working knowledge of data protection legislation, associated issues and the handling of sensitive personal data;
• Strong communication and interpersonal skills, including the ability to work as part of a team sharing information and communicating effectively with colleagues and others;
• Strong analytical skills, with an ability to interpret and analyse diverse sources of information at pace and use this to identify key issues and support decision making and recommendations;
• Strong organisational and planning skills, with the ability to work across teams and manage a range of competing priorities. This will require a flexible and proactive approach;

This role has been deemed Outside IR35 by the client. Applicants must hold, or be happy to apply for, a valid Basic Disclosure Scotland.