Job Posting Title Data Protection Administrator

AON PLC; Birmingham; Hybrid; GBP 30,000 - 48,000; Full time

Job summary

NFP in the UK is seeking a Data Protection Administrator to support the Technology team. You will ensure compliance with the UK GDPR and the Data Protection Act 2018, maintain policies and records, and advise staff on data protection matters.

You’ll handle data subject access requests, data breach responses, DPIAs, and data mapping. The role requires at least two years' experience and knowledge of data protection laws; a relevant certification is desirable.

Qualifications

• Experience in data protection or a similar role (min 2 years).
• Solid knowledge of UK GDPR and UK Data Protection Act 2018.
• Excellent communication and stakeholder engagement.
• Ability to assess and mitigate data protection risks.
• Certification in data protection is desirable but not essential.

Responsibilities

• Develop, implement, and review data protection policies and procedures.
• Monitor compliance with data processing activities and internal policies.
• Handle data subject access requests and data breach incidents.
• Oversee DPIAs and data mapping exercises to identify risks.
• Liaise with ICO and other authorities as required.
• Provide training on data protection principles to staff.

Skills

UK GDPR

Data protection laws

Communication

Analytical thinking

Attention to detail

Two years experience

Job description

Posting Description

We’re hiring for a Data Protection Administrator to support our growing Technology team!

To support our growth in the UK and Ireland, we’re seeking a dedicated Data Protection Administrator to ensure compliance with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). You will be responsible for managing and maintaining our data protection policies, procedures, and records, as well as providing advice and guidance to staff and stakeholders on data protection matters. You will also handle data subject access requests, data breach incidents, and data protection impact assessments.

We’re looking for someone with:

• A thorough knowledge and understanding of the UK Data Protection Act 2018 and the EU GDPR, as well as other relevant laws and regulations
• Excellent communication and interpersonal skills, with the ability to explain complex data protection concepts to different audiences
• Strong analytical and problem-solving skills, with the ability to assess and mitigate data protection risks
• High attention to detail and accuracy, with the ability to work under pressure and meet deadlines
• A minimum of two years of experience in data protection or a similar role
• A certification in data protection, such as the BCS Practitioner Certificate in Data Protection, the IAPP Certified Information Privacy Professional (CIPP), or the ISACA Certified Data Privacy Solutions Engineer (CDPSE), is desirable but not essential

Using these skills, you’ll be:

• Developing, implementing, and reviewing data protection policies, procedures, and processes in line with the UK Data Protection Act 2018 and the EU GDPR
• Monitoring and auditing the compliance of our data processing activities with the data protection legislation and our internal policies
• Performing data protection due diligence requirements reviews on new business acquisitions
• Conducting data mapping exercises and classifying data to identify areas of risk and ensure appropriate protection measures are in place
• Overseeing and conducting DPIAs to assess and mitigate risks associated with data processing activities
• Conducting and overseeing Privacy Impact Assessments (PIAs) for new projects, systems, or processes involving the processing of personal data
• Providing training and awareness to staff and stakeholders on data protection principles, rights, and obligations
• Acting as the main point of contact for data protection queries and issues, both internally and externally
• Evaluating and managing data protection compliance of third-party vendors and partners
• Managing and responding to data subject access requests, data breach incidents, and data protection impact assessments in a timely and effective manner
• Preparing and delivering regular reports on data protection activities, compliance status, and incidents to senior management
• Liaising with the Information Commissioner's Office (ICO) and other relevant authorities as required

We’re committed to creating an inclusive and accessible recruitment process. If you require any reasonable adjustments at any stage of the application or interview process, please let our Talent Team know – we’ll do our best to support you.

Who is NFP?

With over 600 people in the UK and Ireland and over 8,000 employees worldwide, NFP is part of the Aon group and specialise in helping businesses in four core areas:

• Insurance (helping them manage key risks)
• Health and safety (supporting them to create a safer workplace for their employees)
• Employee benefits (helping them reward their people more effectively)
• HR, people and talent (supporting employers and their people to thrive through changes and challenges)

What you’ll love about working here

• working in a dynamic, fast-paced organisation in an exciting industry
• the opportunity to do globally impactful work from day one
• learning from industry and business line specialists with decades of experience
• a huge variety of projects to work on and challenges to solve
• our People First culture, which illustrates our commitment to your wellbeing and development, not just as an employee but as a human being
• a rich suite of employee benefits and out-of-work perks

#NFPUK