Data Protection Manager

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

General

Job Title: Data Protection Manager

Division: Compliance - Risk & Compliance

Reports To: As per Beazley's organisation chart

Key Relationships: Compliance Manager, Global Head of Compliance, Global Compliance Teams, Executive Management Teams, Underwriters, Finance, Internal Audit, Culture & People, Data Management, Risk Management

Job Summary: To provide regulatory compliance assistance and assurance across the company as it grows in size and complexity. Support the global Compliance function, as necessary.

Key Responsibilities

• Provide day to day support to the Data Protection Officer in fulfilling the Data Protection Strategy
• Review supplier contracts and update with data protection clauses
• Handle data subject access requests and e-discovery requests in a timely manner
• Conduct a data mapping exercise to ascertain where all our personal data resides
• Build rapport with stakeholders across the business to provide added value
• Work together with the DPO on maintaining group-wide data protection policies, guidelines, processes
• Report on data protection issues to the DPO in a timely manner
• Support the DPO in all internal and external audits
• Manage the data protection mailbox and escalate to the DPO accordingly
• Maintain the Record of processing activities register and update accordingly
• Support the training and awareness activities on data protection for the group
• Perform data protection impact assessments on new and updated initiatives
• Run monthly MI reports on all data protection activities
• Attend various forums where data protection input is required
• Input into data breach response process
• Take ownership and maintain all key logs such as the DSAR, data incidents, DPIA, supplier logs
• Check data protection controls are applied and embedded properly in projects
• Ensure contracts/agreements meet data protection requirements as and when required
• Handle responses to data protection emergencies and cascade accordingly to the DPO and the relevant forums
• Own horizon scanning and monitor changes to data protection laws and regulations and report on it accordingly

General

It is important that within all your interactions both internally and externally you adhere to Beazley's core values - Being Bold, Striving for Better, and Doing the Right Thing - as they contribute to an internal environment of teamwork and promote a positive brand image and experience to our external customers. We also expect Beazley employees to:

• Comply with Beazley procedures, policies and regulations including the code of conduct, which incorporates the PRA and FCA Conduct.
• Undertake training on Beazley policies and procedures as delivered by your line manager, the Culture & People or assurance teams (compliance, risk, internal audit) either directly, via e-learning or the learning management system.
• Display business ethics that uphold the interests of all our customers.
• Ensure all interactions with customers are focused on delivering a fair outcome, including having the right products for their needs.
• Comply with any specific responsibilities necessary for your role as outlined by your line manager, the Culture & People or assurance teams (compliance, risk, internal audit) and ensure you keep up to date with developments in these areas. This may include, amongst others, Beazley's underwriting control standards, Beazley's claims control standards, other Beazley standards and customer relationship management.
• Carry out additional responsibilities as individually notified, either through your objectives or through the learning management system. These may include membership of any Beazley committees or working groups.

Personal Specification:

Education & Qualifications

• CIPPE/ CIPM/ or any other relevant qualification in Data Protection

Skills & Abilities

• Ability to work at both detailed and summary level.

• Ability to manage time, meet deadlines and prioritise
• Able to communicate effectively with others
• Good understanding of organisational processes
• Team player as well as the ability to use own initiative
• Ability to work in a pressurised, deadline-bound environment

Knowledge & Experience

• Experience working in a global organization
• Experience in creating reports for the C-Suite
• Working knowledge of European and international data privacy laws
• Experience in completing DPIAs
• Experience in handling DSARs

Aptitude & Disposition

• Attention to detail
• Energetic, enthusiastic and positive
• Self-motivated with the ability to work autonomously
• Work effectively under pressure, to deadlines and handling unforeseen circumstances
• Professional approach to successfully interact with colleagues and regulators

Competencies

• Team player
• Effective communicator
• Friendly and approachable
• Flexible and pragmatic
• Information seeking
• Outcome focused