Privacy and Data Protection Specialist (6M FTC) at Multiverse

Multiverse is the upskilling platform for AI and Tech adoption. We have partnered with 1,500+ companies to deliver a new kind of learning that's transforming today’s workforce. Our upskilling apprenticeships are designed for people of any age and career stage to build critical AI, data, and tech skills. Our learners have driven $2bn+ ROI for their employers, using the skills they’ve learned to improve productivity and measurable performance. In June 2022, we announced a $220 million Series D funding round co-led by StepStone Group, Lightspeed Venture Partners and General Catalyst. With a post-money valuation of $1.7bn, the round makes us the UK’s first EdTech unicorn. But we aren’t stopping there. With a strong operational footprint and 800+ employees, we have ambitious plans to continue scaling. We’re building a world where tech skills unlock people’s potential and output. Join Multiverse and power our mission to equip the workforce to win in the AI era. About the job We’re on a mission to embed Privacy and Data Protection at the heart of one of the fastest-growing companies in Europe. We are looking for an enthusiastic Privacy Professional to join our team for a 6-month full-time contract. You will join our Privacy team to help guide the organisation to maturity, working closely with Legal, IT, InfoSec, Product and Tech. This role is ideal for someone who is energised by the challenges of the AI era and comfortable moving from high-level strategy to "hands-on" execution at pace. While you will support all GDPR operations, your primary focus will be on the "engine room" of our growth: vendor compliance and international data transfers. Who You Are - Knowledgeable: you have a strong understanding of GDPR, PECR, and Data Protection laws, including international data transfers, with the ability to provide practical, risk-based advice. - AI first: You are energised by the challenges of the AI era. You’re curious about how LLMs and data processing can be done ethically and legally. You’ll leverage AI in your daily work, and help shape the compliance posture for the organisation. - Collaborative: You are a great communicator who can build relationships across all functions, from Engineering to Sales. What you’ll do Reporting to the Deputy DPO, you will help to build a robust privacy culture and ensure compliance with GDPR, DPA 2018, PECR, and more. Your focus will include: - Vendor Risk Management: Assessing our vendors to ensure ongoing compliance and managing risk in our supply chain against Multiverse’s risk appetite. - Data Processing Agreements (DPAs): Reviewing agreements and ensuring robust international transfer mechanisms are in place to cover UK and EU operations. - Transfer Risk Assessments (TRAs): Managing international data transfer assessments and ensuring we meet documentation requirements. - Documentation: Creating and maintaining accurate records, including Records of Processing Activities (ROPAs) and Data Protection Impact Assessments (DPIAs). - Ad-hoc Advisory: Advising staff on privacy and data protection requests and acting as a subject matter expert on multi-disciplinary projects. Benefits - Time off - 27 days holiday, plus 5 additional days off: 1 life event day, 2 volunteer days, 2 company-wide wellbeing days (M-Powered Weekend) and 8 bank holidays per year - Health & Wellness- private medical Insurance with Bupa, a medical cashback scheme, life insurance, gym membership & wellness resources through Wellhub and access to Spill - all in one mental health support - Hybrid work offering - for most roles we collaborate in the office three days per week with the exception of Coaches and Instructors who collaborate in the office once a month - Work-from-anywhere scheme - you'll have the opportunity to work from anywhere, up to 10 days per year - Space to connect: Beyond the desk, we make time for weekly catch-ups, seasonal celebrations, and have a kitchen that’s always stocked! Our Commitment to Diversity, Equity and Inclusion We’re an equal opportunities employer. And proud of it. Every applicant and employee is afforded the same opportunities regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. This will never change. Read our Equality, Diversity & Inclusion policy here [Upgrade to PRO to see link] Our Commitment to Safeguarding Multiverse is committed to safeguarding and promoting the welfare of our learners. We expect all employees to share this commitment and adhere to our Safeguarding Policy [Upgrade to PRO to see link] our Prevent Policy [Upgrade to PRO to see link] all other Multiverse company policies. Successful applicants will be required to undertake at least a Basic check via the Disclosure Barring Service (DBS). For roles that will involve a Regulated Activity, successful applicants must also undergo an Enhanced DBS check, including a Children’s Barred List check and a Prohibition Order check. Roles involving Regulated Activity may interact with vulnerable groups, therefore are exempt from the Rehabilitation of Offenders Act 1974 meaning applicants are required to declare any convictions, cautions, reprimands, and final warnings. Providing false information is an offence and could result in the application being rejected or summary dismissal if the applicant has been selected, and possible referral to the police and the DBS.