Graduate Data Protection Analyst

Arnold Clark; Glasgow; Hybrid; GBP 32,000 - 52,000; Full time

Benefits offered by this job

33 days annual leave

Flexible leave

Generous employee discounts

Private healthcare

Workplace pension

Job summary

Arnold Clark Group is seeking a data privacy professional to support the organisation’s privacy programme. You will work with the Data Protection and Information Security Team to embed privacy controls and deliver training across the group.

You will help ensure privacy considerations in new products and projects, assess privacy risks, and contribute to data governance and reporting to enable compliant business decisions.

Qualifications

• This role requires a graduate with a 2:2 or higher in law or information security.
• Professional certifications or equivalent experience in privacy/security are welcomed.

Responsibilities

• Support delivery of the organisation’s data privacy programme.
• Provide data privacy guidance to ensure compliant, rapid business outcomes.
• Collaborate with the Data Protection and Information Security Team to embed privacy controls.
• Create and deliver data privacy training and artefacts for data champions.
• Assist in assessing effectiveness of data management and privacy controls.
• Develop data quality policies reflecting privacy by design/default.
• Create reports and contribute to privacy governance across the group.
• Identify and minimise data exposures using approved tools.

Skills

Privacy awareness

Information security

Data governance

Education

Honours degree in law or information security

Relevant professional certifications

Job description

We offer:

• 33 days’ annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• and much more

Hours

Full time: Monday – Friday 37.5 hours per week.

Location

This is a hybrid role, with time spread between your home and our Head Office in Hillington, Glasgow.

About the role

You will support the delivery of the organisation’s data privacy programme. You will work closely with colleagues across the various businesses to provide data privacy advice and guidance to ensure that data can be used effectively, helping us achieve our business outcomes at pace and in a manner compliant with Group policies and in accordance with our strategy and governance framework.

You’llbe expected to work closely with the wider Data Protection and Information Security Team tosupport, deliver, embed and enhance our privacy processes and control framework.

Day to day duties

• Work towards becoming a Data Privacy SME providing advisory support in line with UK GDPR and DPA 2018 across the Arnold Clark Group and its subsidiaries
• Help to ensure Data Privacy is considered in new product, project and technology change processes, providing overview and challenge to support compliant delivery of new business propositions
• Collaborate with the wider data, risk and compliance teams to help ensure privacy risks and incidents are identified, managed and mitigated
• Support the creation and delivery of data privacy training and artefacts to guide our network of data champions, as well as building data protection knowledge across the wider business
• Assist in assessing the effectiveness of existing data management and controls framework
• Support the development of dataqualitypolicies andstandards that reflect a privacy by design and privacy by default approach
• Support the creation of reports
• Collaborate with the data privacy champion network to help embed and support the adoption of good data governance practices across the group
• Use tools to identify and minimise data exposures.

Essential skills

• A graduate with at least 2:2 score in an Honours degree in law or information security related discipline, with no additional requirement for experience in the field. Work experience, even if unrelated to the field, and focus group participation is welcome so do include these in the application.
• A person with passion for privacy and/or information security with HNC, HND, BSc, still studying part-time, or a holder of relevant professional certifications or experience who can evidence paid or voluntary work in the related area.

SFIA skills profile

This role is aligned primarily to SFIA Level 2, reflecting an early-career data protection practitioner who works with guidance, supports established privacy processes and controls, gathers and reviews information, and develops specialist knowledge through practical experience.

• Information assurance

  INAS

  2

  Assists with reviewing privacy controls and evidence to determine whether personal information is appropriately protected and handled.

• Risk management

  BURM

  2

  Supports the identification, recording, assessment and monitoring of data privacy risks and follows agreed escalation and treatment processes.

• Information security

  SCTY

  2

  Contributes to protecting personal information by supporting security and privacy controls, reviewing potential data exposures and escalating concerns.

• Audit

  AUDT

  2

  Collects and reviews evidence, supports structured control assessments and records findings for review by more experienced colleagues.

• Records management

  RMGT

  2

  Supports the maintenance and appropriate handling of records in accordance with established retention, governance and data management requirements.

• Learning delivery

  ETDL

  2

  Assists with preparing and delivering data privacy awareness materials, guidance and learning activities for colleagues and data champions.

• Data analytics

  DAAN

  2

  Gathers and analyses information to support privacy reporting, identify potential data exposures and assess the operation of privacy controls.

• Methods and tools

  METL

  2

  Uses approved privacy, governance and data discovery tools in accordance with documented processes and raises issues requiring specialist attention.

Our Culture

Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.

To find out more about Life at Arnold Clark, visit our website.

Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.