Data Protection Specialist - DSAR/DPIA/ROPA/GDPR

Data Protection Specialist - Stevenage - Inside IR35 - Start 1st of October or before

Potential contract to permanent opportunity available

Job Purpose:As Data Protection Specialist, you will support in delivering the Group's data protection compliance programme.Ensures operational consistency in data protection practices, and acts as a key point of contact across business divisions.You will play a hands-on role in ensuring adherence to data protection laws including UK GDPR and the Data Protection Act 2018, helping to embed a strong culture of privacy and risk awareness across the Group.Principal Accountabilities:

• Support Compliance Oversight: Assist in overseeing data protection practices across the Group, escalating risks or incidents to the CPO as needed.
• DSAR and DPIA Coordination: Take ownership of managing and responding to Data Subject Access Requests (DSARs), in conjunction with internal colleague and external providers where appropriate.
• Conducting Data Protection Impact Assessments (DPIAs) in line with established procedures.
• ROPA Maintenance: Support the creation, ongoing maintenance and accuracy of the Record of Processing Activities
• Contract & Processor Reviews: Support in the review of and advise on data protection clauses in contracts and data sharing agreements, escalating complex matters where appropriate.

Success Measures:

• Timely and compliant responses to DSARs and other data rights requests
• Effective delivery of privacy training sessions across departments
• Up-to-date and accurate records of processing and DPIAs
• Positive feedback from internal stakeholders and staff
• Demonstrable improvements in awareness and compliance within the business

Skills, Know How and experience:Essential:

• Solid working knowledge of UK GDPR, Data Protection Act 2018, other relevant legislation and related guidance
• Experience supporting organisational compliance within a complex or multi-entity/multiple divisional environment
• Experience managing DSARs, DPIAs, and maintaining ROPA
• Strong communication and interpersonal skills, with the ability to build relationships across departments
• Detail-oriented with excellent organisational and prioritisation skills

Desirable:

• CIPP/E, BCS, or other privacy-related certifications (or working towards one)

Other:

• Experience delivering training or awareness sessions
• Familiarity with data protection software or case management tools
• Working knowledge of cybersecurity principles and their intersection with privacy

Please note you will receive an automated response advising you that we have received your CV.

Morgan Philips Group is a global talent solutions business that disrupts conventional thinking in executive search, recruitment and talent consulting. We operate in over 18 markets in Europe, North & South America, Asia, and the Middle East & Africa. We understand that the future is digital and social, so we embrace the latest technology, including video ads and CVs, as well as social recruiting. Our innovative services are tailored to the new world of work yet we do not lose sight of the fact that employees be they existing and potential are ultimately human beings.

We are committed to ensuring that all job applicants are treated equally, without discrimination because of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age.