Data Protection Manager (6-9 Months FTC - Maternity Cover) at octoenergy

octoenergy

Remote (UK)·7h ago

ManagerFull-timeGitGoAI

Salary Range

$86,700 - $117,300 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Information Security and Data Protection professional to join Octopus Electric Vehicles for a 6-9 month fixed-term contract as maternity cover. This role will support the business in maintaining compliance with UK GDPR legislation and processes while working with various teams to expand capabilities and develop solutions to improve service to customers.

Key Responsibilities

→Maintain and develop the company's data protection strategy, policies, procedures, and compliance framework in line with UK GDPR, the Data Protection Act 2018, and PECR.
→Lead and conduct Data Protection Impact Assessments (DPIAs), update Records of Processing Activities (RoPA), conduct Legitimate Interest Assessments (LIAs), and other expected activity records.
→Lead and conduct the end-to-end process for Data Subject Access Requests (SARs) and other data subject rights in a timely and compliant manner.
→Manage the company's data breach response plan, including investigation, reporting, remediation, and communication with the Information Commissioner's Office (ICO) and affected individuals.
→Act as the primary point of contact and subject matter expert for all data privacy matters, providing advice to internal and external stakeholders.
→Conduct due diligence and manage data protection risks associated with third-party suppliers.
→Design and deliver data protection training and awareness campaigns across the business.
→Monitor the evolving privacy regulatory landscape and report on the company's compliance posture and risk level.
→Serve as a point of contact for the ICO and support the designated Data Protection Officer (DPO).

Requirements

✓A passion for Data Protection, Privacy, and Information Security and an ability to explain these concepts clearly.
✓Excellent understanding and practical experience of the principles and issues involved in Data Protection and compliance with UK GDPR legislation and the expectations of the ICO.
✓Excellent understanding of the UK Data Protection Act 2018 and principles involved in maintaining compliance.
✓Forward-thinking, self-motivated, and able to take responsibility for initiatives.
✓Ability to work in a pressured environment while prioritizing work.
✓Supportive and reliable team member with excellent attention to detail.
✓Awareness of Information Security principles and requirements for ISO27001 compliance would be valuable.
✓Any knowledge of the FCA or experience in the financial services industry would be valuable.