Deputy Data Protection Officer

We are looking for a highly experience Deputy Data Protection Officer/Privacy Lawyer who is looking for a new challenge in a different direction; who has a genuine love of data protection, can think innovatively and provide practical and commercial advice in relation to data protection Reporting to the Data Protection Officer, DDPO will provide specialist, pragmatic, regulatory and legal guidance and support to ensure that Three has the right policies, processes, procedures and controls in place to operate in line with its  obligations under UK data protection laws and regulations.

NB: The role does directly contribute to prevention of regulatory fines that can be up to 4% global turnover.

The role will:
•    Work collaboratively with the data protection team, colleagues in Compliance, Legal and InfoSec as well as the wider business to ensure that legal and regulatory requirements / best practices relating to data protection laws and regulations are effectively identified and implemented
•    Review / provide guidance on the development of compliance related policies, procedures, processes and controls to facilitate compliance with applicable laws and regulations
•    Support with DSA and contractual requirements
•    Work closely with the wider Risk & Compliance team to provide holistic support to the business
•    Facilitate the identification, investigation management and resolution of compliance related issues
•    Prepare relevant compliance reporting to meet both internal and external regulatory requirements
•    Engage with 1st / front line operational business teams to inform and advise 3UK and our employees about our obligations to comply with data protection laws and regulations
•    Monitor compliance with the UK- GDPR and other data protection laws, and with our data protection policies, including managing internal data protection activities and conducting compliance reviews
•    Ensure that H3G UK remain properly registered under the law and maintains an active article 30 register of processing activities, driving audit and associated data management processes
•    Manage data privacy breaches or near misses, support the identification of the root cause, mitigations and monitor implementation to prevent recurrence
•    Work with the business to implement compliance with data protection laws and regulation into its transformation programme
•    Oversee the subject access request process and individual rights, identify and evaluate our data processing activities

NB There will be a requirement for weekend and bank holiday working on a rotational basis to support investigations and reporting of data breaches in line with our regulatory obligations.

o    Excellent understanding and knowledge of UK data protection legislation & regulatory regime, with a proven history of working in the field of data protection (including e.g. ISEB/CIPPE qualification)
o    5 + years of subject matter expertise in providing compliance support for data protection compliance including a proven track record in carrying out monitoring reviews
o    Previous experience in a B2C environment with large customer data sets, including marketing
o    Demonstrable experience in the application and implementation of Privacy by Design and Default, conducting Data Privacy Impact Assessments and independent assessment of data breaches
o    Strong communication and interpersonal skills are essential; a people person skilled at building and maintaining relationships both internally and externally as well as managing key stakeholders
o    Ability to work collaboratively with relevant stakeholders to plan, organise and prioritise activities to efficiently meet business objectives
o    Work well under pressure, be flexible and comfortable with ambiguity and manage several tasks at the same time working to tight deadlines

What you'll receive in return…
Competitive annual salary, car cash allowance, a performance based annual bonus & an additional 'flexible allowance' to spend on additional benefits, topping up your pension, or to be added to your salary.
Hybrid working between your home (2-3 days a week) and our brand new Reading HQ office at Green Park (2-3 days a week)
28 days annual leave + 8 bank holidays + 3 personal days annually, which increases with length of service
Private Medical Insurance, Life Assurance and Income Protection
Free mobile phone package & unlimited sim-card
Free on-site car parking
Electric parking bays are available

.... Plus lots more including wellbeing and learning & development benefits!

Our people make us who we are. We’re a diverse and inclusive bunch, and it’s important you can feel you belong here. We value everybody for who they are and what they bring to the table, supporting one another as we continue to deliver for our customers.

With that in mind, if you do not ‘tick every box’ in the job advert above, there are likely other valuable attributes and skills you have that would make you a great addition for the team. So, if you feel this role is for you, then please apply! We are committed to equality in employment and growing a diverse workforce. We embrace those of any race, gender identity, sexual orientation, age, religion, disability, marital status, family status or civil status and we want our teams to reflect this!

We are a Disability Confident Committed Employer. Need any reasonable adjustments? Let us know when you apply so we can support you throughout the interview process.

At Three we have a hybrid working arrangement in place as standard for office based employees, where employees work from a mix of office based location and working from their home in the UK to carry on their role.

Excluding retail, our core hours at Three are between 10:00 and 16:00, with operating hours between 08:00 & 18:30. This allows employees to have a start time between 08:00 and 10:00 and finish time between 16:00 and 18:30.