Description
Rutherford Cross is delighted to partner with a leading challenger bank in Edinburgh looking to appoint a newly created position for a Data Protection Assurance Manager. Due to the nature of this role, the bank is keen to speak with strong Data Protection / GDPR professionals, if you are able to demonstrate a good set of technical skills coupled with commercial acumen, experience gained working within Financial Services is not necessary.
Reporting to the Head of Legal, as the Data Protection Assurance Manager you will support the DPO through the independent assessment of the banks compliance with privacy legislation and regulations, both internally and across its data processing suppliers. You’ll also deliver consultancy and oversight to key data protection related policy standard owners and high-risk processing business areas to ensure successful implementation and embedding of the data protection risk processes across the business
Key responsibilities include:
- Deliver regular reviews and assurance of the data protection risk and control environment.
- Monitor and review all aspects of data protection obligations to assess the banks control, governance and assurance frameworks are compliant with law and Regulatory expectations.
- Assess and manage impact of data protection risk related change against the banks risk appetite and support change initiatives and projects.
- Engage the banks Process Risk and Control Assessment activity to make sure data protection risk are appropriately identified, assessed, tested and reported.
- Deliver consultancy on data protection risk to internal colleagues and support managers in managing data protection risk within their areas.
- Promote and facilitate data protection risk awareness and understanding across the bank through generic and targeted training.
- Ensure data protection risks are managed within board-agreed risk appetites.
- Positively challenge the effectiveness of embedding of the data protection risk management related controls within the business.
- Remain aware of leading practices on managing data protection risk and includes within the development plan ensuring timely insight on industry thinking and emerging data protection risks.
- Develop and maintain key stakeholder relationships across the Bank
Your background:
- Preferably educated to degree level and/or will maintain a data protection qualifications such as BCS/ISEB DP Practitioner or IAPP CIPP, CIPM, CIPT
- Significant experience of managing and working with data protection / information governance frameworks with particular focus on developing within a change environment
- Strong track record in delivering practical and compliant data protection controls
- Experience in information governance, business risk management, audit or information security
- Ability to challenge stakeholders
- Ability to work autonomously, with the ability to introduce fresh thinking to the role and wider risk team
- Passion and enthusiasm to follow developments in privacy and data protection, and maintain a professional expertise and personal interest in these subjects
The bank is committed to professional development and there will be opportunities to develop the role and progress within the team. The Bank also offers flexible working and the option to work from home for 1-2 days per week.
If you are interested in finding out more about this opportunity, please call or email Georgina at Rutherford Cross on 07850766965 or [email protected]