CarmichaelUK are seeking a Junior Data Protection Officer for work on the HS2 Main Works Package in London.
The role will be working be predominantly working from home with occasional visits to the office in Central London.
Duration is expected to last a minimum of 3 months with possible extension / offer of permanent role.
The main function of the role will be to assist the DPO to provide data privacy related advice and to manage the overall compliance of GDPR across SCS JV.
Key Responsibilities
- Ensure all the relevant safeguards are in place to protect personal data against unauthorised or unlawful processing, accidental loss, destruction and damage.
- Identify privacy related issues, raise awareness and ensure compliance with relevant legislation.
- Oversee the data protection impact assessments (DPIAs) and monitor performance against these.
- Keep up to date with relevant law, regulation, policy and market practice.
- Amend / support amending of existing policies, plans and procedures, or drafting new ones;
- Assisting the DPO in supporting the wide project team in ensuring the SCS JV's compliance with GDPR, Data Protection Act 2018 and other applicable data protection laws and regulations;
- Assisting the DPO in handling queries from the SCS JV, and ensuring ongoing compliance in respect of GDPR compliance;
- Working closely with Information Security and Cybersecurity, Legal, People and Stakeholder Interfaces Teams in ensuring data protection compliance within SCS JV;
- Assist the DPO in the collation and maintenance of the SCS JV Article 30 data register.
- Assist the DPO monitor for compliance, data processing activities undertaken across the organization;
- Assisting the DPO to undertake internal data protection audits.
- Issuing and reviewing DPIA’s.
- Assisting the DPO maintain the retention policy and ROPA.
- Be able to assist DPO to review, amend and report on data protection schedules within contracts and assessing the risks these present.
- Prepare reports, slides and collate risks to
- Assist in the completion and maintenance of DPIA’s, Data Protection forms and risk reporting documents.
Required qualifications, skills, behaviors and attributes
- Data Protection qualification i.e. GDPR Foundation and Practitioner.
- Proven data protection experience in a business environment;
- Good written and verbal communication skills
- Able to prioritise workload and work unsupervised;
- Detailed knowledge of privacy related legislation and GDPR;