Data Protection Analyst

Data Protection Analyst
Location: Manchester possible occasional travel to Leicester
Salary: Up to 45K (6 month FTC)

We are the Citation Group. We offer colleagues and clients an opportunity they will not gain at many other businesses. We are interested in growth, investment, and service excellence, we have never and will never grow our business by cost-cutting or tying people up in bureaucracy. We don't do politics - we want people focused upon actions and delivery. We don't do micro-management - we empower, support, and innovate. We are leaders, not empire builders and we love our business.

The Role

The data protection analyst will join the group data protection team and is pivotal in role in assessing the current position of a newly acquired business and where there are gaps in terms of mandatory position and group standard make recommendations which you will then act upon.

Key responsibilities will include:

* Analyse the different business streams, the personal data processed in order to determine processor, controller, joint controller relationships and update or compile a robust and accurate record of processing activity.
* As part of the record of processing activity process, you will compile detailed data maps covering flows, systems, transfers, and recipients.
* Use the record of processing activity to drive the completion of up-to-date privacy notices covering activities as a data controller.
* Work with the departments on assessing and establishing retention times frames for personal data. Once complete and agreed, liaise with IT on technical controls.
* Review of the correct legal basis for processing and verification of legitimate interest balancing tests if and where appropriate and consent management.
* Utilise the information from the above tasks to address contractual provisions, data sharing agreement, and data protection agreements.
* Assess any suppliers based outside the UK for data transfer purposes, discuss and agree the right course of action and action.
* Move records of rights into a central group location.
* Where necessary review and assess historic DPIA's.

Education & Experience:

* Strong data protection analysis capability
* Relevant Qualification - Preferably BCS or ISEB
* In-depth understanding of UKGDPR, DPA, PECR
* Experienced in compiling records of the processing activity and data maps.
* Robust understanding of the legal basis for processing - personal and special category data.
* Experience of writing privacy notices
* Robust understanding of the requirements of data processing agreements, data sharing agreements, data transfers
* Has excellent attention to detail.
* Comfortable and at ease collaborating, building engaging relationships, and a good communicator.
* Ability to work at pace.
* Project management experience would be an advantage in juggling tasks and putting together status reports.
* Knowledge of ISO27001 or information security practices would be desirable but not essential.

Please click 'Apply' to continue your application.