Data Protection Officer

Introduction

Saab UK is a British company that is part of Saab Group's global high-technology operations. Saab offers world-leading solutions and services in defence, aviation, space and civil security. In the UK, we bring together the best of Swedish and British innovation and engineering to provide our customers with products and solutions that push boundaries for what is considered technically possible. Our mission is to help our customers keep people and society safe.

Our Saab UK business is going through a period of rapid growth, which means that we can offer a wide range of opportunities for personal fulfilment and career growth. As part of the global entity Saab AB, Saab UK Ltd combines the innovative spirit of a start-up with the resources and expertise of a larger corporation. Across the country, we have seven principal sites focusing on software engineering, underwater robotics, training services, and radars. Globally, we number over 22,000 employees and have operations on all continents. Technologically, we are leaders in many areas, and we reinvest a high proportion of our earnings in internal research and development. We collaborate with colleagues around the world who all share our challenge - to make the world a safer place.

Saab is a company with opportunities, where we see diversity as an asset and where you have both considerable responsibility as well as good opportunities for advancing in your career. Additionally, Saab respects each person's needs for a rewarding life beyond work.

The Role:

Responsible to the Head of Security as the Data Protection Officer, you will monitor internal compliance, inform and advise on Saab UK data protection obligations, provide advice regarding Data Protection Impact Assessments (DPIAs), and act as a contact point for data subjects and the Information Commissioners Office (ICO). We are seeking a Data Protection Officer to help improve our management of potentially sensitive information, conduct regular internal security audits, and serve as the main point of contact between Saab UK Ltd and data protection authorities. The ideal candidate will have excellent organisational, communication, and management skills, along with an ability to lead training sessions and workshops for staff members. In this role, the Data Protection Officer will be part of the Security team and often be asked to independently communicate with employees to promote data protection compliance within the organisation.

Responsibilities:

1. Be able to demonstrate Saab UK's compliance and accountability to internal stakeholders and the ICO.
2. Serve as the main point of contact within the organisation for staff members, regulators, and relevant public authorities on issues related to data protection.
3. Act as the first point of contact for the Information Commissioner and for individuals who raise concerns over data processing.
4. Evaluate the existing data protection framework to identify areas of non or partial compliance, and rectify any issues.
5. Devise training plans and provide data protection advice to staff members.
6. Promote a culture of data protection and compliance across all units of the organisation.
7. Work with relevant stakeholders to implement data minimisation strategies.
8. Investigate and action as appropriate any requests to rectify, block or erase personal data in accordance with the rights of the Data Subject.
9. Maintain detailed records of data processing activities, including purposes, categories of data, recipients, and retention periods.
10. Assist Saab UK Head of Security with any additional tasks within the wider security function.
11. Inform and advise Saab UK management team, its employees, and any associated processors about their obligations to comply with the UK GDPR and other relevant data protection laws.
12. Monitor compliance with data protection laws, including managing internal data protection activities, advising on DPIAs; training staff and conducting internal audits.
13. Ensure the organisation has robust breach detection, investigation, and internal reporting procedures in place.
14. You will liaise with personnel from across all areas of the company to ensure data protection principles are complied with in all areas of business.
15. Lead on the continuous awareness of GDPR and the DPA through a well-programmed awareness campaign.
16. Manage, investigate, and resolve all complaints from individuals in relation to their rights under data protection laws, ensuring that adequate reporting mechanisms are in place for recording such complaints.
17. Implement and oversee document retention systems to ensure compliance with data protection principles and legal requirements.
18. Develop and maintain data access forecasts, tracking and monitoring user access to sensitive information.

Required skills:

1. Experience of conducting investigations relating to data breaches whilst acknowledging and considering the relevant HR policies.
2. Ability to work to tight deadlines and manage changing priorities.
3. Excellent communication and interpersonal skills.
4. Ability to work independently and collaboratively with cross-functional teams.
5. Strong analytical and problem-solving skills.
6. Three or more years of experience in data protection compliance or related field.
7. Expertise in data protection laws and practices, including a deep understanding of GDPR.
8. Experience in a legal, audit, or risk management role.
9. Strong project management skills.
10. Ability to work effectively under pressure and to manage sensitive and confidential information.

As National Security Vetting clearance is required for this role, applicants will be required to hold National Security Vetting clearance to SC level or have the ability to gain it.