Data Protection Officer

Harvey Nash Group; City of Edinburgh; Hybrid; GBP 26,000 - 31,000; Part time

Job summary

Harvey Nash Group is seeking a Data Protection Officer on a 23-month contract with hybrid working in Edinburgh (3-4 days per week). The role supports the ADPO in DP trackers, data maps, and audit procedures, ensuring SARs are processed within statutory timelines and records are maintained.

Qualifications

• Knowledge of data protection legislation and handling of sensitive personal data.
• Strong communication and interpersonal skills.
• Strong analytical abilities for rapid information interpretation and decision support.
• Excellent organisational and planning skills across multiple teams.

Responsibilities

• Support the Assistant Data Protection Officer (ADPO) with DP trackers and workflows.
• Support the ADPO with data map development and audit procedures; guide internal teams.
• Manage Data Subject Access Requests (SARs) and Erasure requests within statutory timelines; maintain workflows and records.
• Oversee day-to-day management of the Data Protection mailbox.
• Provide guidance on email security and liaise with Cyber Security when required.
• Assist in developing data protection policy, procedures and guidance with timely reviews.
• Stay updated with legislation to ensure accurate guidance for Inquiry teams.

Skills

Data protection knowledge

Communication skills

Analytical skills

Organisational skills

Job description

Data Protection Officer | 23 Month Contract | (Outside IR35) | Hybrid, 3-4 days pw Edinburgh| Starting ASAP

Day Rate: £156.29

About the role:

• Support the Assistant Data Protection Officer (ADPO) through the completion and maintenance of relevant DP trackers and workflows;
• Support the ADPO with the development and maintenance of the clients data map and relevant audit procedures; this will include support and guidance to internal teams;
• Work with the ADPO to ensure Data Subject Access Requests (SARs) and Erasure requests are managed and responded to in line with statutory timelines, with responsibility for the upkeep of workflows and the record management systems to evidence full life cycle of each SAR;
• Responsible for the day-to-day management of the Data Protection mailbox;
• Provide guidance and support in regards email security, e.g., phishing, liaising with colleagues in Cyber Security, where required;
• Contribute to the development of data protection policy, procedure and guidance; ensuring timelines, e.g., annual review dates, are actioned in good time;
• Keep up to date with relevant legislation, policies and procedures, to ensure guidance and support provided to Inquiry teams is current and accurate;
• Provide input and support to the ADPO in the development of training and awareness of Data Protection across the various teams;
• Support the ADPO in the work of the transfer of records

Essential Criteria

• A working knowledge of data protection legislation, associated issues and the handling of sensitive personal data;
• Strong communication and interpersonal skills, including the ability to work as part of a team sharing information and communicating effectively with colleagues and others;
• Strong analytical skills, with an ability to interpret and analyse diverse sources of information at pace and use this to identify key issues and support decision making and recommendations;
• Strong organisational and planning skills, with the ability to work across teams and manage a range of competing priorities. This will require a flexible and proactive approach;

This role has been deemed Outside IR35 by the client. Applicants must hold, or be happy to apply for, a valid Basic Disclosure Scotland.