E003101

Role summary

Team and compliance framework

• Ensure UK entities' privacy and data protection obligations are mapped to activities, processes, and controls.
• Embed global horizon scanning in the UK team's routine work and contribute to UK Compliance reporting.
• Manage the team and monitor delivery against key activities and internal service-level agreements.
• Monitor workload and resource needs, identify obstacles, escalate issues, and support direct reports' development.

Data protection operations

• Oversee delivery of DPIAs, ROPAs, policies, notices, reviews, assessments, training, advisory requests, and relevant registrations.
• Coordinate with information security, IT, and co-sourced providers on DSARs, e-discovery, and subpoenaed information.
• Oversee outsourced data protection provision and coordinate with regional DPOs.
• Advise on technical data protection matters and ensure relevant contracts address information security, data security, privacy, and breach notification.
• Ensure data-protection actions from audit, assurance, and testing activities are completed on time.

Incidents and governance

• Maintain privacy incident reporting and response processes for incidents, alleged policy violations, and external complaints.
• Escalate data breaches to relevant UK entity boards and keep relevant risk and compliance leaders informed.
• Lead required notifications to the ICO and participate in incident response and lessons learned.
• Contribute to data protection committee reporting and cross-border coordination with regional DPOs.

Role qualifications

• The role is certified in the UK under the Senior Managers and Certification Regime (SM&CR).
• The role calls for expertise in data protection matters, including advice on technical issues and contract clauses where appropriate.

Key relationships