Data Protection Executive

Salary: £37,000 to £40,000 per annum

* 2 positions available*

Hours: 12 month fixed term contract, 37.5 hours per week, Monday to Friday.

Reports to: Senior Data Protection and Internal Audit Manager

Location: Harlow, Essex. Easily commutable from London Liverpool Street or Tottenham Hale Station. We offer a free minibus service to/from Harlow Town Train Station as well as free parking and EV charging on site.

Extra Information: Based 2 days per week at our office in Harlow, Essex, 3 days working from home however some flexibility to come into the office more often might be required.

In this role you will manage and deliver on second line data protection assurance activities and responsibilities of the Charity.

You will

• Objectively review and ensure the organization complies with internal data protection regulations and established control protocols,

• Provide assurance that the organisation is compliant with necessary data protection laws and regulations and ensure it remains so.

• Support the Data Protection Officer with data protection, including embedding the culture and framework across the organisation.

• Record, coordinate and support responses to Data Subject Rights Requests (including DSARs), contributing to responses in line with statutory timescales, internal procedures and regulatory guidance.

• Support evidence gathering across systems and teams, including use of eDiscovery or search tools where appropriate, under the direction of the DPO.

• Apply a working understanding of the UK GDPR rules relating to data subject rights, including exemptions, extensions, red actions and third-party considerations.

• Record and monitor data breaches and near misses.

• Liaise with departments to perform initial review and response to Data Protection Impact Assessments.

• Manage the DPIA review cycle to ensure areas are periodically revisited.

• Monitor the Record of Processing Activities with departments and ensure remains up to date.

• Respond to management’s initial enquiries regarding data protection/GDPR so as to help management comply with Motability’s obligations to keep personal data secure, referring matters onwards to the DPO as appropriate.

• Challenge data retention justifications, including where and how data is storage and managed in practice.

• Present summarised findings from data protection assurance reviews of processes to Data Protection Officer.

• Monitor the GDPR risk register for the business and ensure actions are completed.

• Deliver data protection audits across the business in accordance with UK GDPR and DPA 2018 requirements to ensure controls operate effectively and compliance is maintained.

• Monitor and manage data protection audit action completeness by management.

• Assist colleagues in respect of UK GDPR/DPA 2018 training requirements.

• Provide assistance for data protection, internal audit and risk functions including ad hoc projects and tasks that may be reasonably requested to support the Risk, Controls and Compliance Manager.

Must haves:

• Understanding of data subject rights under UK GDPR, including practical experience supporting or delivering DSAR responses.

• An understanding of data protection regulations (DPA 2018, UK GDPR)

• Data Protection experience, ideally gained through a charity or health sector.

• An analytical thinker with attention to detail, you will be able to form good judgements and think objectively.

• Ability to manage competing deadlines and sensitive information when handling statutory requests under time pressure.

• Ability to work effectively on your own or as part of a team.

• Organised and resilient under pressure, adaptable to change.

Nice to haves:

• Exposure to the use of eDiscovery, search or document review tools to support DSARs, investigations or litigation disclosure.

• Experience applying DSAR exemptions, extensions and redaction decisions in practice.

• Experience of communicating and managing challenging situations.

• Exposure to presenting findings and reports to Senior Management.

• Experience of internal audit or risk management.

• Exposure to technology‑enabled review, monitoring or assurance tools used in data protection or compliance functions.

Who are we?

We…