Senior Data Privacy Analyst

John Lewis Partnership; London; On-site; GBP 51,000 - 60,000

Job description

At a glance

• Hybrid Working - This is a hybrid working role, therefore your time will primarily be split between working from home and the London Head Office. However, there will also be an expectation to visit other locations as required, such as branch locations.
• Our Data privacy team currently works from the office once a week to connect and on a more ad-hoc basis to attend key meetings, but again the frequency is dependent on the business needs.
• Expected Salary - £51,800 - £60,000 (depending upon experience)
• Contract type - This position is a Fixed term contract for up to 12 months.

What you'll do

You will:

• Take responsibility for actively engaging with the transformation programme and deliver tasks on time as per the master schedule.
• Engage with the transformation project by providing expert advice on how the Partnership can embed privacy by design within new initiatives and services.
• Generate risk assessments and communicate findings to assist senior decision makers in making decisions relating to the processing of personal data.
• Act as the point of contact for transformation project stakeholders for data privacy, providing ad-hoc advice and guidance where required.
• Support the development and implementation of data privacy policies, notices, procedures and controls within the transformation project.
• Collaborate closely with other FS control functions such as Compliance Advisory, AML, Risk (both Partnership and FS) to ensure consistency of advice and prioritisation of risks and working closely with the commercial business owners for credit and insurance.
• Maintain the Partnership's and the Data Privacy Office's knowledge of personal data protection legislation, guidance, and practice in relation to the financial services sector.
• Research and identify relevant data privacy and information security practices associated with complex business processes and assist with the creation of corrective recommendations and actions.

What you'll have (Essential Skills and Experience)

• Strong background in financial services products in the insurance and/or credit sectors and demonstrable knowledge & compliance with relevant UK regulation.
• Experience / knowledge of data protection regulations/guidance, operations and risk management and an understanding of the UK Data Protection Act, UK GDPR and Privacy and Electronic Communications Regulations.
• To be an excellent communicator both in writing and orally.
• Previous experience of investigatory work and presenting findings to different audiences.

What else you could bring (Desirable Skills)

• Practitioners Certificate in Data Protection, CIPP/E or a relevant data protection qualification.
• Understanding of network security where it applies to personal data.
• Previous experience of working in a large retail organisation or financial services organisation.
• Previous experience of working on a large transformation program.

Additional Information

• The application form consists of a CV upload, followed by application questions. Please save the application questions to a Google docs before entering on Workday.
• Internal applicants please copy paste this link on to the browser for job outline - https://bit.ly/SrDPA-FS
• You'll be asked about any adjustments you might need to support the recruitment process. Let us know, and we'll be sure to discuss it with you.