Data Protection Officer - DUAL page is loaded DataProtection Officer - DUAL Apply locations London time type Fulltime posted on Posted 3 Days Ago job requisition id R0011443 Whoare we? Howden is a collective – a group of talented and passionatepeople all around the world. Together, we have pushed theboundaries of insurance. We are united by a shared passion andno-limits mindset, and our strength lies in our ability tocollaborate as a powerful international team comprised of 18,000employees spanning over 100 countries. People join Howden for manydifferent reasons, but they stay for the same one: our culture.It’s what sets us apart, and the reason our employees have beenturning down headhunters for years. Whatever your priorities – work/ life balance, career progression, sustainability, volunteering –you’ll find like-minded people driving change at Howden. We’relooking for an experienced Data Protection Officer (DPO) to helpdrive forward, and support, some of our most challenging andinteresting Personal Data related projects. The job holder,reporting directly to the DUAL UK Chief Risk Officer, and with adotted line to the Group DPO, will be responsible for supportingthe business with general BAU matters relating to Data Protectioncompliance, as well as understanding, assessing and then managingthe scope, design, implementation and rollout of a wider DataProtection compliance framework fit for DUAL. This framework setsthe bar for required levels of Data Protection compliance and corecontrol standards. The role involves a detailed understanding ofboth UK and EU Data Protection Regulations, as well as a generalunderstanding of universal principles that can apply globally. Therole will work alongside the various DUAL operational businessunits, as well as with its more centralised control functions suchas Risk. There will be engagement with core Howden Group centralfunctions such as IT, Legal, HR and Procurement, and the role willalso require close engagement with other teams and SMEs within thewider Howden Group businesses. The role will work closely withHowden’s Group DPO, to ensure that activities are aligned to Groupprivacy strategy, that key risks are identified and remediated, andthat there is adequate oversight at a business entity and Grouplevel. Role responsibilities - Provide timely and considered adviceand guidance on a range of data protection matters relating toDUAL’s UK businesses. This will include, but will not be limitedto: - General Data Protection Compliance, as it applies to bothcommercial and retail customers - Processes and controls to ensureongoing compliance - Personal Data Breach Management - Marketing -DPIAs - Subject Rights - Privacy Notices - Data Security - Suppliermanagement - Enhance and embed a data protection framework toensure compliance with all applicable Data Protection legislation,for UK based entities. - Work closely with the Howden Group DPO toimprove and drive a Data Protection strategy that is aligned to theoperating model of the business and helps ensure consistency. -Maintain processes to ensure adequate oversight of complianceposture, including monitoring of compliance with all aspects of theData Protection Policy. - Raise awareness of Data Protection, andsupport training staff and internal audits. - Monitor thecompletion of mandatory training by DUAL colleagues and take actionto ensure maximum take-up. - Provide advice on the conducting ofand monitoring of data protection impact assessments (DPIAs). -Help develop KRI reporting processes. - Continually improve DataProtection/ Privacy reporting appropriate for senior management andthe Boards. - Cooperate with the UK Information Commissioner’sOffice (ICO) or relevant supervisory authority. Key requirements -Five years’ experience within a Data Protection compliance field,to include building, implementing and managing data protectionprogrammes within a complex and enterprise-wide organisation. -Specific experience in managing Data Protection risks within aretail financial services environment, including advising on andmonitoring processes for meeting data subject rights. -Professional qualification in the Data Protection space, andexperience in driving compliance improvements in a highly drivenand agile entity. - Experience with supporting marketinginitiatives and the PECR regulations. - Detailed knowledge of UKand European data protection law. - An understanding of technicaland organisational measures that should be in place to ensure thesecurity of personal data and familiarity with informationtechnologies and data security. - Experience in compliancemonitoring and risk management. What do we offer in return? Acareer that you define. At Howden, we value diversity – there is noone Howden type. Instead, we’re looking for individuals who sharethe same values as us: - Our successes have all come from someonebrave enough to try something new. - We support each other in thesmall everyday moments and the bigger challenges. - We aredetermined to make a positive difference at work and beyond.Reasonable adjustments We're committed to providing reasonableaccommodations at Howden to ensure that our positions align wellwith your needs. Besides the usual adjustments such as software,IT, and office setups, we can also accommodate other changes suchas flexible hours or hybrid working. If you're excited by this rolebut have some doubts about whether it’s the right fit for you, sendus your application – if your profile fits the role’s criteria, wewill be in touch to assist in helping to get you set up with anyreasonable adjustments you may require. *Not all positions canaccommodate changes to working hours or locations. Reach out toyour Recruitment Partner if you want to know more. Permanent AboutUs Howden began in 1994, as just three people and a dog. Now thereare 17,000 of us, and we're a leading global insurance group,managing $38bn of premiums for our clients. Our largest shareholdergroup is us – the people who work in the business – supported bythree long-term, minority growth-equity partners who share ourvision to build a business to last, one that will never be sold.The owner's mindset is something that's embedded in our culture;our people readily take ownership of their decisions, theiractions, and their outputs. They’re invested in every sense. And weall know that by working together to drive the business forward,everyone will benefit from the extraordinary results we canachieve. #J-18808-Ljbffr