At a Glance
- Tasks: Lead data protection initiatives and manage compliance with UK GDPR and data privacy regulations.
- Company: Join Octopus Electric Vehicles, a top-rated workplace known for its innovative culture.
- Benefits: Enjoy competitive pay, flexible working, and perks that truly matter to you.
- Other info: Be part of a forward-thinking team that values your contributions and growth.
- Why this job: Make a real impact in data protection while working in a dynamic and supportive environment.
- Qualifications: Passion for data protection, strong understanding of UK GDPR, and excellent communication skills.
The predicted salary is between 40000 - 50000 £ per year.
We're looking to hire an Information Security and Data Protection team at Octopus Electric Vehicles!
Key Responsibilities
- Subject
- Rights
Management: Lead and conduct the end-to-end process for Data Subject Access Requests (SARs) and other data subject rights (e. g., erasure, rectification) in a timely and compliant manner.
- Compliance and
Governance: Maintain and develop the company's data protection strategy, policies, procedure, and compliance framework in line with UK GDPR, the Data Protection Act 2018, and PECR.
- Records and
- Risk
Documentation: Lead and conduct Data Protection Impact Assessments (DPIAs), update our Records of Processing Activities (Ro PA), conduct Legitimate Interest Assessments (LIAs) and any other expected activity records.
- Breach
Management: Manage the company's data breach response plan, including investigation, reporting, remediation, and communication with the Information Commissioner's Office (ICO) and affected individuals where necessary.
- Advisory: Act as the primary point of contact and subject matter expert for all data privacy matters, providing pragmatic advice to internal and external stakeholders, at all levels of the business.
- Third-Party
Risk: Conduct due diligence and manage data protection risks associated with third-party suppliers, including Saa S vendors, finance providers, vehicle dealerships, data brokers, and marketing partners.
- Training and Awareness: Design and deliver engaging data protection training and awareness campaigns across the business to foster a strong privacy-aware culture.
- Monitoring and Reporting: Monitor the evolving privacy regulatory landscape and report on the company's compliance posture and risk level.
- ICO Liaison: Serve as a point of contact for the ICO and support the designated Data Protection Officer (DPO).
Requirements
- A passion for Data Protection, Privacy and Information Security and an ability to explain these concepts in a clear and meaningful way to those who may not be familiar with them
- Expert handling of DSARs
- Excellent understanding and practical experience of the principles/issues involved in Data Protection and compliance with UK GDPR legislation and the expectations of the ICO
- Excellent understanding of the UK Data Protection Act 2018 and of the principles/issues involved in maintaining compliance Forward-thinking, self-motivated and able to take responsibility for your own initiatives and drive them to implementation
- Ability to work in a pressured environment while prioritising work in a considerate way
- Supportive and reliable team member, with excellent attention to detail
- Awareness of Information Security principles and requirements for ISO27001 compliance would be valuable
- Any knowledge of the FCA or experience in the financial services industry would be valuable
- Octopus Electric Vehicles , part of the Octopus Energy Group, won the Sunday Times best company to work for in 2024.
We were named 6th out of the top 100 start-ups to work for by Tempo in 2025 and on Glassdoor we were voted 50 best places to work in 2022 .
- Our Group CEO, Greg has recorded a podcast about our culture and how we empower our people
- Octopus Energy Group is a unique culture .
An organisation where people learn, decide, and build quicker.
Where people work with autonomy, alongside a wide range of amazing co-owners, on projects that break new ground.
We want your hard work to be rewarded with perks you actually care about!
- Visit our perks hub - Octopus Employee Benefits
- #J-18808-Ljbffr
Data Protection Manager (3 Month - Inside IR35) employer: NextGenEnergyJobs
NextGenEnergyJobs is an exceptional employer that fosters a collaborative and innovative work culture, perfect for those passionate about driving change in the home energy sector. With a strong emphasis on employee growth, we offer ample opportunities for professional development and mentorship, ensuring that our team members thrive in their roles. Located in a vibrant area, we provide a dynamic environment where your contributions directly impact our mission to create sustainable energy solutions.
