Data Protection Officer - DUAL

Howden is a collective – a group of talented and passionate people all around the world. Together, we have pushed the boundaries of insurance. We are united by a shared passion and no-limits mindset, and our strength lies in our ability to collaborate as a powerful international team comprised of 18,000 employees spanning over 100 countries.

People join Howden for many different reasons, but they stay for the same one: our culture. It’s what sets us apart, and the reason our employees have been turning down headhunters for years. Whatever your priorities – work / life balance, career progression, sustainability, volunteering – you’ll find like-minded people driving change at Howden.

We’re looking for an experienced Data Protection Officer (DPO) to help drive forward, and support, some of our most challenging and interesting Personal Data related projects.

The job holder, reporting directly to the DUAL UK Chief Risk Officer, and with a dotted line to the Group DPO, will be responsible for supporting the business with general BAU matters relating to Data Protection compliance, as well as understanding, assessing and then managing the scope, design, implementation and rollout of a wider Data Protection compliance framework fit for DUAL. This framework sets the bar for required levels of Data Protection compliance and core control standards.

The role involves a detailed understanding of both UK and EU Data Protection Regulations, as well as a general understanding of universal principles that can apply globally.

The role will work alongside the various DUAL operational business units, as well as with its more centralised control functions such as Risk. There will be engagement with core Howden Group central functions such as IT, Legal, HR and Procurement, and the role will also require close engagement with other teams and SMEs within the wider Howden Group businesses.

The role will work closely with Howden’s Group DPO to ensure that activities are aligned to Group privacy strategy, that key risks are identified and remediated, and that there is adequate oversight at a business entity and Group level.

Role responsibilities

1. Provide timely and considered advice and guidance on a range of data protection matters relating to DUAL’s UK businesses. This will include, but will not be limited to:

• General Data Protection Compliance, as it applies to both commercial and retail customers
• Processes and controls to ensure ongoing compliance
• Personal Data Breach Management
• Marketing
• DPIAs
• Subject Rights
• Privacy Notices
• Data Security
• Supplier management

1. Enhance and embed a data protection framework to ensure compliance with all applicable Data Protection legislation, for UK based entities.
2. Work closely with the Howden Group DPO to improve and drive a Data Protection strategy that is aligned to the operating model of the business and helps ensure consistency.
3. Maintain processes to ensure adequate oversight of compliance posture, including monitoring of compliance with all aspects of the Data Protection Policy.
4. Raise awareness of Data Protection, and support training staff and internal audits.
5. Monitor the completion of mandatory training by DUAL colleagues and take action to ensure maximum take-up.
6. Provide advice on the conducting of and monitoring of data protection impact assessments (DPIAs).
7. Help develop KRI reporting processes.
8. Continually improve Data Protection/ Privacy reporting appropriate for senior management and the Boards.
9. Cooperate with the UK Information Commissioner’s Office (ICO) or relevant supervisory authority.

Key requirements

• Five years’ experience within a Data Protection compliance field, to include building, implementing and managing data protection programmes within a complex and enterprise-wide organisation.
• Specific experience in managing Data Protection risks within a retail financial services environment, including advising on and monitoring processes for meeting data subject rights.
• Professional qualification within the Data Protection space, and experience in driving compliance improvements in a highly driven and agile entity.
• Experience with supporting marketing initiatives and the PECR regulations.
• Detailed knowledge of UK and European data protection law.
• An understanding of technical and organisational measures that should be in place to ensure the security of personal data and familiarity with information technologies and data security.
• Experience in compliance monitoring and risk management.

A career that you define. At Howden, we value diversity – there is no one Howden type. Instead, we’re looking for individuals who share the same values as us:

• Our successes have all come from someone brave enough to try something new
• We support each other in the small everyday moments and the bigger challenges
• We are determined to make a positive difference at work and beyond

We're committed to providing reasonable accommodations at Howden to ensure that our positions align well with your needs. Besides the usual adjustments such as software, IT, and office setups, we can also accommodate other changes such as flexible hours* or hybrid working*.

If you're excited by this role but have some doubts about whether it’s the right fit for you, send us your application – if your profile fits the role’s criteria, we will be in touch to assist in helping to get you set up with any reasonable adjustments you may require.

*Not all positions can accommodate changes to working hours or locations. Reach out to your Recruitment Partner if you want to know more.