General

Job Title: Data Protection Manager

Division: Compliance – Risk & Compliance

Reports To: As per Beazley’s organisation chart

Key Relationships: Compliance Manager, Global Head of Compliance, Global Compliance Teams, Executive Management Teams, Underwriters, Finance, Internal Audit, Culture & People, Data Management, Risk Management

Job Summary: To provide regulatory compliance assistance and assurance across the company as it grows in size and complexity. Support the global Compliance function, as necessary.

Key Responsibilities

Provide day to day support to the Data Protection Officer in fulfilling the Data Protection Strategy
Review supplier contracts and update with data protection clauses
Handle data subject access requests and e-discovery requests in a timely manner
Conduct a data mapping exercise to ascertain where all our personal data resides
Build rapport with stakeholders across the business to provide added value
Work together with the DPO on maintaining group-wide data protection policies, guidelines, processes
Report on data protection issues to the DPO in a timely manner
Support the DPO in all internal and external audits
Manage the data protection mailbox and escalate to the DPO accordingly
Maintain the Record of processing activities register and update accordingly
Support the training and awareness activities on data protection for the group
Perform data protection impact assessments on new and updated initiatives
Run monthly MI reports on all data protection activities
Attend various forums where data protection input is required
Input into data breach response process
Take ownership and maintain all key logs such as the DSAR, data incidents, DPIA, supplier logs
Check data protection controls are applied and embedded properly in projects
Ensure contracts/agreements meet data protection requirements as and when required
Handle responses to data protection emergencies and cascade accordingly to the DPO and the relevant forums
Own horizon scanning and monitor changes to data protection laws and regulations and report on it accordingly

General

It is important that within all your interactions both internally and externally you adhere to Beazley’s core values - Being Bold, Striving for Better, and Doing the Right Thing – as they contribute to an internal environment of teamwork and promote a positive brand image and experience to our external customers. We also expect Beazley employees to:

Comply with Beazley procedures, policies and regulations including the code of conduct, which incorporates the PRA and FCA Conduct.
Undertake training on Beazley policies and procedures as delivered by your line manager, the Culture & People or assurance teams (compliance, risk, internal audit) either directly, via e-learning or the learning management system.
Display business ethics that uphold the interests of all our customers.
Ensure all interactions with customers are focused on delivering a fair outcome, including having the right products for their needs.
Comply with any specific responsibilities necessary for your role as outlined by your line manager, the Culture & People or assurance teams (compliance, risk, internal audit) and ensure you keep up to date with developments in these areas. This may include, amongst others, Beazley’s underwriting control standards, Beazley’s claims control standards, other Beazley standards and customer relationship management.
Carry out additional responsibilities as individually notified, either through your objectives or through the learning management system. These may include membership of any Beazley committees or working groups.

Personal Specification:

Education & Qualifications

CIPPE/ CIPM/ or any other relevant qualification in Data Protection

Skills & Abilities

Ability to work at both detailed and summary level.
Ability to manage time, meet deadlines and prioritise
Able to communicate effectively with others
Good understanding of organisational processes
Team player as well as the ability to use own initiative
Ability to work in a pressurised, deadline-bound environment

Knowledge & Experience

Experience working in a global organization
Experience in creating reports for the C-Suite
Working knowledge of European and international data privacy laws
Experience in completing DPIAs
Experience in handling DSARs

Aptitude & Disposition

Attention to detail
Energetic, enthusiastic and positive
Self-motivated with the ability to work autonomously
Work effectively under pressure, to deadlines and handling unforeseen circumstances
Professional approach to successfully interact with colleagues and regulators

Competencies

Team player
Effective communicator
Friendly and approachable
Flexible and pragmatic
Information seeking
Outcome focused

Data Proctection jobs

Data Protection Manager