We are a large retail organisation with a national presence. As we continue to grow, we have a brand-new opportunity for a Data Privacy Analyst to join our data team.

About the role

Reporting to the Data Governance Manager, the Privacy Analyst will play a vital role in protecting our valuable data. You will work closely with colleagues across the various businesses to provide data privacy advice and guidance to ensure that data can be used effectively, helping us achieve our business outcomes at pace and in a manner compliant with Group policies and in accordance with our strategy and governance framework.

You’ll be expected to work closely with the Data Governance Manager to support, deliver, embed and enhance our privacy processes and control framework.

Hours: Full time: Monday – Friday, 37.5 hours per week.

Location

This is a hybrid role, with your time spread between your home and our Head Office in Hillington, Glasgow.

What you'll do

  • Act as Data Privacy SME providing advisory support in line with UK GDPR and DPA 2018 across the Arnold Clark Group and its subsidiaries.
  • Ensure Data Privacy is considered in new product, project and technology change processes, providing overview and challenge to support compliant delivery of new business propositions
  • Collaborate with the wider Data Governance, risk and compliance teams to ensure privacy risks and incidents are identified, managed and mitigated
  • Support the creation and delivery of data privacy training and artefacts to guide our network of data champions, as well as building data protection knowledge across the wider business
  • Assist in assessing the effectiveness of existing data management and controls framework
  • Work with the Data Governance Manager and key risk stakeholders to support the development of data quality policies and standards that reflect a privacy by design and privacy by default approach
  • Support creation of reports and MI for Data Councils, Data Management Working Groups and agreed Forums
  • Collaborate with the data privacy champion network to help embed and support the refresh Record of Processing Activity registers and Group retention schedules

What you'll have

  • Background in data privacy and protection, with good knowledge of the GDPR, PECR and DPA 2018 frameworks (happy to work towards CIPP/E)
  • Ability to support varied projects delivering solutions at pace
  • Proven track record of supporting the delivery of privacy and data protection process change
  • Ability to understand the role Data Privacy plays within the wider context of Data Governance
  • Good understanding and interest in key industry changes impacting the regulatory landscape, such as AI and Data ethics
  • An ability to communicate simply and to influence effectively at all levels
  • A collaborative approach to help support best in class data governance and a privacy first culture
  • Good understanding of Data Privacy matters related to the use of enterprise-wide technology (e.g. outsourcing, Cloud applications and AI)
  • Experience with controls assessment, testing, reporting and analysis
  • Ability to support the design and implementation of policies, standards, guidance and tools in a simple and engaging manner

What you'll get

  • Bi-annual bonus
  • 33 days holiday (including public holidays)
  • Hybrid working arrangements – two in-office days per week on average
  • Private healthcare
  • Life assurance
  • Salary sacrifice contributory pension scheme
  • Discretionary bonus scheduled at 10%

Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals. To find out more about Life at Arnold Clark, visit our website.