Data Protection Administrator in Birmingham

We’re hiring for a Data Protection Administrator to support our growing Technology team! To support our growth in the UK and Ireland, we’re seeking a dedicated Data Protection Administrator to ensure compliance with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). You will be responsible for managing and maintaining our data protection policies, procedures, and records, as well as providing advice and guidance to staff and stakeholders on data protection matters. You will also handle data subject access requests, data breach incidents, and data protection impact assessments.

We’re looking for someone with:

• A thorough knowledge and understanding of the UK Data Protection Act 2018 and the EU GDPR, as well as other relevant laws and regulations
• Excellent communication and interpersonal skills, with the ability to explain complex data protection concepts to different audiences
• Strong analytical and problem-solving skills, with the ability to assess and mitigate data protection risks
• High attention to detail and accuracy, with the ability to work under pressure and meet deadlines
• A minimum of two years of experience in data protection or a similar role
• A certification in data protection, such as the BCS Practitioner Certificate in Data Protection, the IAPP Certified Information Privacy Professional (CIPP), or the ISACA Certified Data Privacy Solutions Engineer (CDPSE), is desirable but not essential

Using these skills, you’ll be:

• Developing, implementing, and reviewing data protection policies, procedures, and processes in line with the UK Data Protection Act 2018 and the EU GDPR
• Monitoring and auditing the compliance of our data processing activities with the data protection legislation and our internal policies
• Performing data protection due diligence requirements reviews on new business acquisitions
• Conducting data mapping exercises and classifying data to identify areas of risk and ensure appropriate protection measures are in place
• Overseeing and conducting DPIAs to assess and mitigate risks associated with data processing activities
• Conducting and overseeing Privacy Impact Assessments (PIAs) for new projects, systems, or processes involving the processing of personal data
• Providing training and awareness to staff and stakeholders on data protection principles, rights, and obligations
• Acting as the main point of contact for data protection queries and issues, both internally and externally
• Evaluating and managing data protection compliance of third-party vendors and partners
• Managing and responding to data subject access requests, data breach incidents, and data protection impact assessments in a timely and effective manner
• Preparing and delivering regular reports on data protection activities, compliance status, and incidents to senior management
• Liaising with the Information Commissioner's Office (ICO) and other relevant authorities as required

We’re committed to creating an inclusive and accessible recruitment process. If you require any reasonable adjustments at any stage of the application or interview process, please let our Talent Team know – we’ll do our best to support you.