Data protection operations manager (FTC)

Job Title: Data protection operations manager (FTC)
Contract Type: Contract
Location: Reading
Salary: £300 per day
Start Date: 2019-01-25 00:00:00
Reference: 748101396
Contact Name: Jennifer Castle
Contact Email:
Job Published: January 25, 2019 17:02

Job Description

What is the purpose of this role?

Our client is committed to protecting the privacy of their customers, and to manage their personal data to the highest standards; this comes in various forms from providing advice to colleagues to handling customer requests. To achieve this, they are seeking a temporary Data Protection Operations Manager to form part of our growing Data Protection team.

This role will be responsible for reviewing, logging and providing advice for Data Protection Impact Assessments (DPIA / DaPRAs).

You will manage a small team who are responsible for Records of Processing, 3rd party record documentation, data inventory and EIR monitoring.

Salary Information

This role with our client, a large utility company, is based in central Reading with a pay rate of circa £300 per day, covering maternity leave until November 2019.

What skills are we looking for?

Our client is seeking a highly engaging and enthusiastic individual; with solid knowledge and professional experience in dealing with national data protection laws and practices; plus an understanding of GDPR.

Your previous experience will be within a similar role.

What will this role involve?

You will:

Support the business in completing DPIAs / DaPRAs using the new DPIA forms and process.

Agree metrics with Head of DP Operations and DPO and be responsible for guiding the DP operations executive in collating monthly metrics and ad hoc information requests on DPIA/ DaPRAs. And review process periodically, implementing any new requirements.

Log and link any data or 3rd parties highlighted in the DPIAs that need to be included in the Records of Processing.

Coordinate and monitor maintenance of the Record of Processing. In the short to medium term, this will involve collating information from BUs and inputting it into the software tool (eg OneTrust). Longer term it will be to educate and ensure BUs have updated and added records using selected Software.

Ensure that Legitimate Interest Assessments have been carried out and documented.

Guide the DP operations executive in helping with inputs and administration; and in setting up and collating top level EIR KPIs.

Work with the Contracts team to create and maintain a log of 3rd party records and associated risks using selected software.

Ensure that existing and new 3rd party processing feeds into and updates the central Records of Processing. And regular review schedule is implemented.

Support the administration of 3rd party vendor assessments and new 3rd party onboarding, including creation of processing instructions (terms of reference to be agreed with the contracts team).

Identify, create and maintain a record of all 3rd parties processing personal data that don't appear on SAP (eg non-billing services like Survey Monkey or charities).

Coordinate with the Data Factory to ensure that the data inventory is reviewed and updated regularly.

Ensure that there is a central DP log of data quality issues, remediation plans and implementation dates and evidence.