Data Protection Manager

Swindon – with hybrid workingFollowing the recent acquisition, the High Street enters an exciting new chapter as TGJones, filled with opportunity and growth. We have a number of positions allowing you to explore new pathways, broaden your expertise and play a key part in shaping the future of the business. It’s a perfect time to take charge of your career at TGJones.

Contributing to the overall corporate governance and effective risk management of the business, this role forms part of the Legal & Compliance team, who are based in our Support Centre in Swindon.

The role of Data Protection Manager reports to the Legal Director and Company Secretary and is responsible for overseeing the organisation’s day-to-day data protection compliance with the UK GDPR, PECR and other relevant regulations. This role will act as the primary point of contact for data protection issues, and you will be the subject matter expert providing advice across the business on policies, processes, data breach management, marketing compliance, individual rights management, and training. A key task will be embedding a culture of data protection at the new company.What you will be doing:

• Ensuring compliance with CCTV regulations including third party access requests
• Managing data protection incidents and breaches, ensuring timely reporting and resolution
• Reviewing DPIAs for new systems, vendors and activities
• Providing training and guidance to employees to enhance data protection awareness
• Reviewing and supporting with any Individual Rights Requests
• Managing and updating Policies and transparency notices such as Privacy Notices
• Managing data subject complaints and regulatory enquiries
• Responsible for the review of RoPAs and other registers
• Written data handling guidance to our stores
• Providing project support when new systems are considered, or new marketing activities are designed
• Working cross-functionally with various teams, including Loss Prevention and Information Security, to ensure data protection requirements are met
• Configuring the WHS website OneTrust Cookie Preference Centre and regular cookie scans
• Keeping up to date on the latest developments in data protection laws and regulations

What we are looking for:

• CIPP/E and CIPM or equivalent data protection qualifications a requirement
• Demonstratable experience in data protection and risk management in a commercial or retail sector setting
• Strong understanding of data privacy and data protection regulation and ICO guidance
• Knowledge of how to perform audits and DPIA’s to prescribed standards
• Ability to coordinate activities and maintain confidentiality whilst working with internal and external stakeholders
• Excellent communication (verbal and written) and interpersonal skills
• Ability to work both independently and collaboratively
• Interpersonal skills and the ability to build strong relationships
• Strong Team player
• Initiative and Drive
• Excellent IT skills: Full Microsoft Office Suite

This role will suit a self-starter who can set up the data protection accountability framework for the new company and quickly build a network of data champions to support the function. You will have a high degree of autonomy and will have the opportunity to develop your skills and knowledge in a very supportive environment. It is an exciting opportunity for someone looking for a senior data protection role in an innovative and creative environment.

About Us:

We’re a company that values our people; from day one you will receive ongoing support and have access to our various training and development programmes as well as exciting career development opportunities for your future. We offer a wide range of benefits to say thank you for all your hard work including; a competitive salary, a profit related bonus, 25 days holiday plus your birthday off, pension, as well as other perks such as our popular holiday trading scheme.We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, colour, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, and basis of disability. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.