Data Privacy Compliance Analyst - Edinburgh

Data Privacy Compliance Analyst

Edinburgh

£30k per annum FTE

6 month Fixed Term Contract

Financial Services

Our client is looking for a Data Privacy Compliance Analyst to join their Edinburgh team for a period of 6 months on a fixed term contract basis.

Overview:

This role will work on a contract basis as a Data Privacy SME based within the second line of defence Risk & Compliance team and providing support and consultancy to our client and other group companies where applicable in relation to data privacy/data protection laws and regulations.

The Data Privacy Compliance Analyst’s role is to work with the Data Protection Officer (UK/Europe) to: 

• Promote a culture of data privacy compliance within the Company.
• Assist the Company in maintaining its compliance with data privacy/data protection obligations.
• Provide support to the Company’s Senior Management by providing assurance on the systems and controls connected with the Company’s data privacy obligations. 

Responsibilities:

Regulatory Records

To maintain appropriate records and documentation relating to data privacy, including:

• The Company’s Records of Data Processing as a Data Controller and as a Data Processor.
• Register of Personal Data breaches.
• Data Privacy Universe to support monitoring activity.
• Data Privacy Risk Register.
• Data Privacy Incident Reports.
• Data Privacy Impact Assessments.
• The Company’s Data Privacy Notices as a data controller.

Regulatory Developments

• To monitor the ICO, FCA and EU Commission websites for developments in regulation of data privacy and maintain an awareness of legislative changes and developments in industry best practice regarding data privacy.
• Contributing to the implementation of data privacy regulatory developments that impact the Company or its client platforms.
• Providing impact analysis on data privacy regulatory changes as required.
• Working with the business to facilitate their understanding of data privacy regulatory developments and ensuring that they are embedded into processes and controls.
• Ensuring that data privacy regulatory changes are notified where appropriate to internal Committees and to clients through the Compliance Regulatory Developments team.

Managing Relationships

• Providing support and challenge to key business stakeholders in managing data privacy risks and issues within the business.
• Liaising with external stakeholders including clients, auditors, third parties as required.

Team working

• Sharing ideas to enhance cross-team learning and business development.
• Building and maintaining relationships with internal and external parties.
• Supporting the team’s efforts to succeed.
• Balance team and individual responsibilities.
• Exhibit objectivity and openness to others' views.

Maintaining operational and company standards

• Supporting the organisation’s key business objectives whilst maintaining regulatory compliance.
• Encouraging and driving quality and continuous improvement of processes used across the business.
• Ensuring practices are compliant with regulatory bodies’ expectations.

Experience Required:

• Previous experience in a data protection oversight and/or consultancy role, ideally within a financial services environment.
• Good knowledge of GDPR and DPA requirements and related guidance.
• Understanding of FCA rules and regulatory framework preferably gained through a compliance function. 
• Experience of a platform environment/ investment operations services an advantage. 
• Relevant professional or industry qualification.
• Good communication, relationship management and influencing skills.
• Ability to build and maintain effective internal and external relationships.
• Ability to analyse, present and report regulatory information to stakeholders in a clear and concise manner.