Data Protection Manager (UK Wide, GB)

About Group

Group is a global leader in digital transformation with 52,000 employees and annual revenue of c. € 10 billion, operating in 54 countries under two brands — for services and Eviden for products. European number one in cybersecurity, cloud and high-performance computing, Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. is a SE (Societas Europaea) and listed on Euronext Paris.

The purpose of is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

The role

Therole is fully remote and will operate within the Risk and Assurance Directorate and includes a requirement to support Aegon and Royal London account mandates.

The Data Protection Manager, BTS reports to the Head of Data Protection, BTS (Conduct and Compliance) and is one distinct vertical in our Directorate structure. This role is pivotal to delivering our second-line assurance model forward across the business, providing direct, proactive and expert SME support into the business operations. This will enable the delivery of operational processes that are compliant with design and provide a source of technical advice and guidance that will protect the end customers, our corporate partners and the business.

will operate as Data Processors in the delivery of the outsourcing service to our current client’s mandates. Data Controller responsibility and obligations rests with our client(s), However, there is a need to deploy assurance activities to ensure our processes and controls operate in a compliant manner.

Key Responsibilities:

• Establish and maintain close working relationships with all operational teams and act as a trusted point of technical / SME advice and guidance.
• Establish and maintain close working relationship with relevant change teams and act as a trusted point of technical / SME advice and guidance.
• Provide technical / SME advice in the assessment of data protection breaches, assist in the development of remedial actions and track remediation of past data protection issues.
• Produce and maintain appropriate data protection policies and procedures for BTS.
• Promote and enhance the data protection governance culture within BTS.
• Performance of assurance assessment and gap analysis of process and procedures against data protection regulatory requirements.
• Monitor compliance with data protection and privacy legislation in an environment dealing with significant amounts of personal data. Understand DPA and FOIA rules and principle-based regulation and use risk-based techniques to assess compliance requirements, mitigations, and weaknesses.
• Support 1st line operational staff and management in assessing their DP regulatory risk and controls, including DSAR and FOIA requests.
• Deliver effective education to business on Data protection and regulatory risk/upstream risk management through developing and reviewing training to meet specific needs of stakeholders.
• Continuous liaison with those responsible for data protection for our clients including the requirement to hold regular joint governance meetings.

Skills we can’t do without

• Expert knowledge of Data Protection regulatory risk environment and operation of regulatory bodies.
• Experience of interpreting DP regulatory requirements within the financial services industry – minimum 3 years’ experience.
• Experience of building key relationships as well as influencing/challenging stakeholders.
• DP Practitioner Certificate, ISEB or equivalent Data Protection qualification.
• Expert knowledge of national and European data protection laws and practices, as well as in-depth understanding of the General Data Protection Regulation (GDPR) and knowledge of the UK Data Protection and Digital Information Bill.
• Experience conducting data privacy compliance assurance reviews and managing information and data security activities in a business environment.
• Demonstrable experience in developing and managing information and data security assurance programs, including third parties with the confidence to act as a leading authority to all business units.
• Ability to provide clear advice and direction even when dealing with ambiguity and when faced with competing demands and short deadlines.

Future career path: opportunity for global career progression

Eligibility: be eligible for BPSS security clearance

Benefits:

• Pension Scheme - contributions matched up to 10%
• Private medical cover
• Income Protection
• Life Assurance
• 25 days paid leave + National Holidays
• Flex benefits program

Diversity, Equity & Inclusion

Here at , diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all. As a Disability Confident employer, we encourage applications from all applicants, especially, differently abled applicants. We aim to ensure that those who meet the minimum criteria for this position will be offered an interview. We are committed and willing to making reasonable adjustments to the application and assessment process to accommodate your needs.

We are also a care leaver-friendly employer. If you require additional support with your application, please contact our recruiter or send an email to our dedicated mailbox -