At a Glance
- Tasks: Lead data protection initiatives and ensure compliance with UK GDPR regulations.
- Company: Join Octopus Electric Vehicles, a top-rated workplace with a unique culture.
- Benefits: Enjoy competitive perks, a supportive team, and opportunities for personal growth.
- Other info: Be part of a dynamic team that values autonomy and creativity.
- Why this job: Make a real impact in data protection while working in an innovative environment.
- Qualifications: Passion for data protection and experience with compliance and risk management.
The predicted salary is between 40000 - 50000 £ per year.
We're looking to hire an Information Security and Data Protection team at Octopus Electric Vehicles!
Key Responsibilities
- Subject
- Rights
Management: Lead and conduct the end-to-end process for Data Subject Access Requests (SARs) and other data subject rights (e. g., erasure, rectification) in a timely and compliant manner.
- Compliance and
Governance: Maintain and develop the company's data protection strategy, policies, procedure, and compliance framework in line with UK GDPR, the Data Protection Act 2018, and PECR.
- Records and
- Risk
Documentation: Lead and conduct Data Protection Impact Assessments (DPIAs), update our Records of Processing Activities (Ro PA), conduct Legitimate Interest Assessments (LIAs) and any other expected activity records.
- Breach
Management: Manage the company's data breach response plan, including investigation, reporting, remediation, and communication with the Information Commissioner's Office (ICO) and affected individuals where necessary.
- Advisory: Act as the primary point of contact and subject matter expert for all data privacy matters, providing pragmatic advice to internal and external stakeholders, at all levels of the business.
- Third-Party
Risk: Conduct due diligence and manage data protection risks associated with third-party suppliers, including Saa S vendors, finance providers, vehicle dealerships, data brokers, and marketing partners.
- Training and Awareness: Design and deliver engaging data protection training and awareness campaigns across the business to foster a strong privacy-aware culture.
- Monitoring and Reporting: Monitor the evolving privacy regulatory landscape and report on the company's compliance posture and risk level.
- ICO Liaison: Serve as a point of contact for the ICO and support the designated Data Protection Officer (DPO).
Requirements
- A passion for Data Protection, Privacy and Information Security and an ability to explain these concepts in a clear and meaningful way to those who may not be familiar with them
- Expert handling of DSARs
- Excellent understanding and practical experience of the principles/issues involved in Data Protection and compliance with UK GDPR legislation and the expectations of the ICO
- Excellent understanding of the UK Data Protection Act 2018 and of the principles/issues involved in maintaining compliance Forward-thinking, self-motivated and able to take responsibility for your own initiatives and drive them to implementation
- Ability to work in a pressured environment while prioritising work in a considerate way
- Supportive and reliable team member, with excellent attention to detail
- Awareness of Information Security principles and requirements for ISO27001 compliance would be valuable
- Any knowledge of the FCA or experience in the financial services industry would be valuable
- Octopus Electric Vehicles , part of the Octopus Energy Group, won the Sunday Times best company to work for in 2024.
We were named 6th out of the top 100 start-ups to work for by Tempo in 2025 and on Glassdoor we were voted 50 best places to work in 2022 .
- Our Group CEO, Greg has recorded a podcast about our culture and how we empower our people
- Octopus Energy Group is a unique culture .
An organisation where people learn, decide, and build quicker.
Where people work with autonomy, alongside a wide range of amazing co-owners, on projects that break new ground.
We want your hard work to be rewarded with perks you actually care about!
- Visit our perks hub - Octopus Employee Benefits
- #J-18808-Ljbffr
Data Protection Manager (3 Month - Inside IR35) in London employer: NextGenEnergyJobs
NextGenEnergyJobs is an exceptional employer that fosters a collaborative and innovative work culture, perfect for those passionate about driving change in the home energy sector. With a strong emphasis on employee growth, we offer ample opportunities for professional development and mentorship, ensuring that our team members thrive in their roles. Located in a vibrant area, we provide a dynamic environment where your contributions directly impact our mission to create sustainable energy solutions.
StudySmarter Expert Advice🤫
We think this is how you could land Data Protection Manager (3 Month - Inside IR35) in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like NextGenEnergyJobs.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like NextGenEnergyJobs.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like NextGenEnergyJobs.
We think you need these skills to ace Data Protection Manager (3 Month - Inside IR35) in London
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives NextGenEnergyJobs a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at NextGenEnergyJobs; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at NextGenEnergyJobs.
How to prepare for a job interview at NextGenEnergyJobs
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with NextGenEnergyJobs for the Data Protection Manager (3 Month - Inside IR35), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at NextGenEnergyJobs.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Data Protection Manager (3 Month - Inside IR35) role at NextGenEnergyJobs.
