Data Protection Manager

Location Hybrid / 3 days in the office (Ripponden) Salary £55,000 - £65,000 depending on experience Vacancy Type Permanent/Full Time Job Profile Job Profile document

Job Description

Job title

Data Protection Manager

Function

Legal

Location

Ripponden

Reports to

Legal & HR Director

Responsible for staff

n/a

About our business

JLA has been providing critical assets and services to a range of businesses and sectors including Care Homes, Hospitals, Schools, and Hotels for over 50 years. These assets and services are crucial in supporting customers with their Laundry, Catering, Heating, Fire Safety, Infection Control, and Air Conditioning.

The company offers a unique, all-inclusive package called Total Care, this rental model allows customers to make a single monthly payment, to receive brand new equipment, and have maintenance costs taken care of.

When you join the JLA family, you'll also gain access to an extensive benefits package.

We care about our people and take your well-being seriously, which is why we offer a range of supportive tools for health and wellbeing, financial guidance, and legal advice. Our Employee Assistance Programme, 24/7 Wellness and Lifestyle App plus a dedicated team of Mental Health First Aiders are there to support you through life's challenges.We also offer up to 8 counseling sessions, which can be in-person or remote, providing you with the support and flexibility to suit your own personal needs.

You can reach any fitness goals with our free onsite gym at head office along with a range of other gym membership discounts available.

To offer financial support, we not only provide life assurance coverage, company sick pay, and a company pension scheme, we offer a range of added benefits such as free office parking, eye care vouchers, a cycle-to-work scheme, and exclusive discounts through our staff benefits hub.

We really pride ourselves in offering a healthy work-life balance and believe it is important to have time away to recharge which is why we provide 25 days of annual leave plus bank holidays, flexible working options, and enhanced family leave policies.

We are a company that appreciates you and invests in your success and even have a Colleague Recognition Scheme to celebrate your achievements. We're dedicated to your growth, offering support in career development and training. We value your referrals, and through our Refer a Friend scheme, you can earn up to £1,000 in bonus rewards!

Role overview

An experienced and knowledgeable data protection manager to ensure the organisation's compliance with data protection laws, including the General Data Protection Regulation (GDPR) and other applicable regulations. The data protection manager will be responsible for overseeing the data protection strategy, advising on data privacy issues, conducting audits, and acting as a point of contact for data subjects and regulatory authorities.

Key tasks

• Develop, implement and oversee the organisation's data protection policies and procedures including the UK and other territories, including the Republic of Ireland and The Netherlands.
• Ensure compliance with data protection laws (eg GDPR, PECR) and internal privacy standards
• Provide expert advice and guidance on data protection impact assessments (DPIAs) and risk management
• Conduct regular audits to monitor compliance and address potential privacy issues
• Deliver training and awareness programs to employees on data protection best practices
• Collaborate with Legal, IT and HR teams to manage data protection risks
• Maintain records of data processing activities (ROPA) and ensure accuracy
• Investigate and manage data breaches, ensuring timely reporting to authorities when necessary
• Act as a point of contact for data subjects regarding privacy concerns and data subject access requests

Managing Risk

• Awareness of your operational and regulatory risks which may impact on your role
• Responsibility for reporting to your line manager any risk which may impact the business

Criteria

Essential (attributes required for candidate to be considered)

Desirable (attributes can be trained or developed)

Knowledge and Skills (what you know and what you can do)

• In-depth knowledge of data protection laws, including GDPR and local data protection regulations in the UK
• Familiarity with data protection issues in emerging technologies (eg AI, IoT)
• In-depth knowledge of direct marketing laws as they relate to data privacy, such as the Privacy and Electronic Communications Regulations
• Strong project management skills

Knowledge of data protection laws in Ireland and the Netherlands is helpful but not essential

Knowledge of cybersecurity best practices and technologies

Knowledge of data protection social norms across the EU

Experience (what you have done)

• Experience in drafting and implementing data protection policies.
• Experience conducting data protection impact assessments and managing data breach incidents.
• Experience in preparing and maintaining records of data processing activities
• Experience in responding to data subject access requests and other requests from data subjects regarding their personal data
• Experience in delivering training and awareness programs to employees on data protection best practices
• Familiarity with information security management systems and data governance frameworks
• Experience in a legal, audit or risk management role

Personal qualities

(the way you think and act)

• An ability to work effectively under pressure and to manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail

Qualifications

• A nationally recognised data protection qualification