We are looking for an experienced Data Protection Consultant to support with the creation and operationalisation of key data protection policies, procedures and processes underpinning the organisation’s data protection compliance framework and the analysis of data protection requirements applicable to the programme.  

Our Future Health will be the UK’s largest ever health research programme, bringing people together to develop new ways to detect, prevent and treat diseases. We are a charity, supported by the UK Government, in partnership with charities and industry. We work closely with the NHS and with public authorities across all nations and regions of the UK.

Our plan is to bring together 5 million volunteers from right across the UK who will be asked to contribute information to help build one of the most detailed pictures we have ever had of people’s health. Researchers will be able to use this information to make new discoveries about human health and diseases. So future generations can live in good health for longer.

What you’ll be doing

In this role, you will be reporting to the DPO and working closely with the Data Protection Manager and with stakeholders across the board. Your key responsibilities will include but not be limited to:

• Conducting gap and risk analysis of our data protection compliance programme.
• Researching data protection requirements and supporting with the analysis of available fulfilment options and applicable risks to the business.
• Developing key data protection policies and processes under the guidance of the DPO and operationalising them in close collaboration with stakeholders across the board.
• Creating standard data protection documentation templates & guidance notes.
• Creating and/or updating the programme’s data protection documentation (i.e. DPIAs, LIAs).
• Leading a comprehensive data mapping/retention exercise across the board.
• Carrying out retrospective due diligence on key suppliers/partners.

Requirements

You will have the ability to undertake large, long-term projects, develop alternative methods to complete them and implement solutions. To succeed, you will also have some of the following skills and experience:

• Experience in the UK and/or EU data privacy laws.
• Experience within a compliance, legal, audit and/or risk function, with recent experience in privacy compliance.
• Experience working in a regulated industry and developing policy.
• Strong knowledge of European and UK data privacy and data protection regulation, and a good understanding of other major privacy frameworks and evolving legislation worldwide.
• Strong change and project management skills, including the ability to work unsupervised, manage time well, prioritise effectively and handle multiple deadlines.
• Ability to use independent judgement and discretion when making majority of decisions.
• Detail-oriented approach.
• Ability to handle confidential and sensitive information with the appropriate discretion.
• Knowledge of PC applications, including MS Office.
• Experience of working in the charitable, healthcare or health research sector would be advantageous.

Qualifications

• Passed Legal Practice Course (LPC) OR law degree OR CILEx (Chartered Institute of Legal Executives) qualification OR Paralegal apprenticeship, certificate, diploma or higher diploma.
• Hold at least one data protection and/or privacy certification, such as CIPP, CIPT, CIPM, ISEB, etc.

Benefits

• Competitive basic salary.
• Generous company pension package with employer contributions of up to 12%.
• 30 days annual leave (plus bank holidays).
• Continuous career development with regular appraisals and learning and development opportunities.
• A lovely new office in Holborn, Central London – we offer flexible and remote working arrangements.

Join us - let’s prevent disease together.

UK Atomic Energy Authority  

OpenAI  

The University of Edinburgh  

Abt Global  

Oritain  

Lindus Health  

RAND Europe  

Stability AI  

Huq Industries  

Care Access