Data Protection Officer

We are looking for an individual who has a genuine love of data protection, can think innovatively and provide practical and commercial advice in relation to data protection. Reporting to the Director of Compliance, the Data Protection Officer will provide specialist and practical guidance in relation to data protection laws and regulations to facilitate Three’s compliance with the requirements and drive forward a culture where data protection is at the heart of our business. 

In this role you’ll do a variety of interesting and important things that are essential to Three operating in a way that enables it to be compliant with relevant data protection laws and regulations.

• Ensure personal information is processed in line with applicable legal and regulatory obligations
• Ensure industry good practice through the implementation of appropriate data privacy frameworks
• Monitor compliance with legal and regulatory obligations and with our data protection policies, including managing internal data protection activities, raising awareness of data protection issues, providing training and awareness to staff and conducting compliance reviews
• Manage data privacy breaches or near misses, support the identification of the root cause, mitigation and monitor implementation to prevent recurrence
• Advise on and monitor data protection impact assessments
• Act as the point of contact for the ICO and for individuals whose data is processed or those who process data on our behalf. Oversee timely response to data subject access requests.
• Identify and understand the key risks associated with the processing we undertake, escalate as appropriate and work closely with the risk team to monitor and mitigate these risks
• Provide SME input on data handling and protection including data classification, retention, loss prevention and encryption and emerging technologies such as AI
• Manage the DP team, coach and mentor team members to achieve outstanding levels of delivery, performance, challenge and oversight  
   

Required

• Must have experience managing a team in a similar role
• Excellent understanding and knowledge of UK data protection legislation & regulatory regime, with a proven history of working in the field of data protection (including e.g. ISEB/CIPPE qualification)
• Demonstrable experience in the application and implementation of Privacy by Design and Default, conducting Data Privacy Impact Assessments and independent assessment of data breaches
• Experience as DPO in a B2C environment (ideally Telecoms) with large customer data sets, including marketing
• Ability to perform the duties of a DPO independently, including corresponding with regulators and data subjects, providing advice and guidance to the business
• Ability to work with technical and security teams to develop data protection policies and processes
• Experience working in a fast paced environment and able to prioritise activities
• Strong communication and interpersonal skills are essential; a people person skilled at building and maintaining relationships both internally and externally as well as managing key stakeholders
• Strong writing skills – ability to perform detailed analysis and write clear concise reports and advisory briefs
• Proven ability to implement change and manage processes

Preferred

• Previous telco experience in a similar role
• Law degree and experience as a counsel

• A car allowance, a performance based annual bonus & an additional 'flexible allowance' to spend on additional benefits, topping up your pension, or to be added to your salary.
• Hybrid working between your home (2-3 days a week) and our brand new Reading HQ office at Green Park (2-3 days a week)
• 28 days annual leave + 8 bank holidays + 3 personal days annually, which increases with length of service.
• Private Medical Insurance, Life Assurance and Income Protection.
• Free mobile phone package & unlimited sim-card
• Free on-site car parking 
• Plus lots more including wellbeing and learning & development benefits!

Our people make us who we are. We’re a diverse and inclusive bunch, and it’s important you can feel you belong here. We value everybody for who they are and what they bring to the table, supporting one another as we continue to deliver for our customers.

With that in mind, if you do not ‘tick every box’ in the job advert above, there are likely other valuable attributes and skills you have that would make you a great addition for the team. So, if you feel this role is for you, then please apply! We are committed to equality in employment and growing a diverse workforce. We embrace those of any race, gender identity, sexual orientation, age, religion, disability, marital status, family status or civil status and we want our teams to reflect this!

We are a Disability Confident Committed Employer. Need any reasonable adjustments? Let us know when you apply so we can support you throughout the interview process.

At Three we have a hybrid working arrangement in place as standard for office based employees, where employees work from a mix of office based location and working from their home in the UK to carry on their role.

Excluding retail, our core hours at Three are between 10:00 and 16:00, with operating hours between 08:00 & 18:30. This allows employees to have a start time between 08:00 and 10:00 and finish time between 16:00 and 18:30.