This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The primary focus of this role is to be a specialist in managing regulatory subject access requests (SARs) within the legal timelines set out by the Information Commissioners Office (ICO). The role holder will collaborate within internal teams in a confidential and professional manner to ensure our regulatory obligations are met. Help Clarity to continue to meet our levels of information governance and data compliance within the business systems and processes across all business functions. As part of a small team this role will help support, facilitate and ensure data governance. Supporting the technology and compliance delivery teams through creation, modification and organisation of the technical documentation library.
Job Responsibility:
Receive, record and manage data subject access requests and rights requests from individuals within the statutory timeframe
Assess each request to determine its scope and verify the identity of the requester
Co-ordinate with internal teams to locate and collate relevant personal data
Redact sensitive or third party information where necessary to comply with legal obligations
Maintain accurate records and logs for all subject rights requests
Escalate complex requests to the Group Data Privacy Officer
Support the Group Data Privacy Officer with ad hoc data protection tasks as required
Support our provision of an effective Information Assurance, Governance and Compliance service
Managing responses to customer requests for information/ assurance
Data Governance processes
Data Protection Impact Assessments
Information Asset Risk Assessments
Collaborating with the key stakeholders to complete security questionnaires from both customers and suppliers
Create, maintain (where applicable) and organise technical documentation for use by the business and to share with customers where appropriate
Requirements:
Knowledge and experience of Data privacy regulations and their practical application
Understanding of the UK GDPR regulations
Broad understanding of the security implications of digital delivery
Effective at stakeholder engagement
Organisational skills, able to prioritise and self-manage workload