17 May, 2018

Data Protection & Compliance Manager

  • The Challenge
  • London, UK
Full time Information Tech.

Job Description

Data Protection & Compliance Manager

Start date: ASAP

Location: Waterloo, London

The Challenge

The Challenge's vision is a more integrated society where there is understanding and appreciation of each other's differences. We design and deliver programmes that bring different people together to develop their confidence and skills in understanding and connecting with others. We believe everyone benefits when people from all walks of life come together to better know, understand and trust each other. This also applies to the people we employ to work with us. As an equal opportunities employer our aim is to have a diverse workforce to reflect the communities we work in.

This is a unique opportunity to join a dynamic, rapidly growing organisation, working with young people and local communities across the country. For more information about what The Challenge does and what its values are, please visit our website.

About the role

The successful candidate will have a background in legal, compliance, IT Security/InfoSec, internal audit and have extensive knowledge of data privacy legislation including GDPR. Reporting to the Chief Financial Officer, they will be responsible for overseeing the organisation's data privacy compliance programs and inform and advise on data protection laws and organisation policies. They will also lead on the ISO27001 compliance project, PCI DSS and other compliance/ audit matters.

Responsibilities

  • Act as the organisation's data protection officer, being the point of contact for internal queries and external reporting.
  • Be the focal point across the organisation on all data compliance matters in preparation for changes in the GDPR framework and ISO27001.
  • Continue the momentum of the GDPR exercise and lead on ISO27001 compliance, in conjunction with the Head of Technology.
  • Develop and implement a data protection compliance framework tailored to the needs of the organisation.
  • Position Data Protection and related activities at the heart of all organisational initiatives through coordination across the organisation's departments and teams.
  • Develop and implement other internal audit/ compliance frameworks as required.
  • Inform and advise the organisation and its employees of their data protection obligations under the GDPR.
  • Monitor the organisation's compliance with the GDPR and internal data protection policies and procedures. This will include monitoring the assignment of responsibilities, awareness training, and training of staff involved in processing operations and related audits.
  • Advise on the necessity of data protection impact assessments (DPIAs), the manner of their implementation and outcomes.
  • Serve as the contact point to the data protection authorities for all data protection issues, including data breach reporting.
  • Serve as the contact point for individuals (data subjects) on privacy matters, including subject access requests.
  • Develop and implement an annual internal audit plan using a risk-based approach.

Skills and experience

Essential

  • Strong knowledge of Data Privacy Legislation (GDPR) preferably a certified EU General Data Protection Regulation Practitioner.
  • Strong knowledge of ISMS frameworks and the ISO27001 standard requirements.
  • Knowledge of Cyber Security Risks, PCI DSS and other information security standards.
  • Experience in managing data incidents and breaches.
  • Demonstrable experience performing a similar role around data protection compliance within the charity or not-for-profit sector (e.g. as a Data Protection Officer/Manager etc.)
  • Working knowledge of the incoming legislation surrounding the GDPR laws, particularly the compliance requirements.
  • Knowledge of other Data Compliance e.g. BACS/AUDDISS/PCI and internal audit/ compliance procedures.
  • Those with a programme management qualification e.g. PRINCE2 are particularly encouraged to apply.

Safeguarding Statement

The Challenge is committed to safeguarding and protecting the young people that we work with. As such, all posts are subject to a safer recruitment process, including the disclosure of criminal records and vetting checks. We ensure that we have a range of policies and procedures in place which promote safeguarding and safer working practice across our programmes.

We expect all staff and post holders to share this commitment to safeguarding by ensuring compliance with our policies and practices.

Employment Screening

Only applicants who have the right to work in the UK or have a valid visa or work permit for a minimum of 6 months at the time of application will be considered for this role.

Further Details

In addition to being part of a fun, dynamic and challenging workforce, we are proud to offer an attractive benefits package including contributory pension, Simplyhealth cash plan, Ride 2 Work, childcare vouchers, season ticket travel card loan etc. to eligible employees.

  • Status: This is a full-time, Permanent
  • Salary: Competitive based on experience
  • To apply: Please apply by sending your CV and cover letter via the button below; vacancy closes by 20 May
  • Interview process: Selection for this position will include two rounds of interviews, the first of which will commence in late May

No Agencies


Apply Now