Graduate Data Protection Analyst

We have a brand-new opportunity for a Graduate Data Protection Analyst to join our data team based within our Head Office in Glasgow.

We Offer

• 33 days’ annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• …and much more
  
  

Hours

Full time: Monday – Friday 37.5 hours per week.

Location

This is a hybrid role, with time spread between your home and our Head Office in Hillington, Glasgow.

About The Role 

You will support the delivery of the organisation’s data privacy programme. You will work closely with colleagues across the various businesses to provide data privacy advice and guidance to ensure that data can be used effectively, helping us achieve our business outcomes at pace and in a manner compliant with Group policies and in accordance with our strategy and governance framework.

You’ll be expected to work closely with the wider Data Protection and Information Security Team to support, deliver, embed and enhance our privacy processes and control framework.

Day to day duties

• Work towards becoming a Data Privacy SME providing advisory support in line with UK GDPR and DPA 2018 across the Arnold Clark Group and its subsidiaries
• Help to ensure Data Privacy is considered in new product, project and technology change processes, providing overview and challenge to support compliant delivery of new business propositions
• Collaborate with the wider data, risk and compliance teams to help ensure privacy risks and incidents are identified, managed and mitigated
• Support the creation and delivery of data privacy training and artefacts to guide our network of data champions, as well as building data protection knowledge across the wider business
• Assist in assessing the effectiveness of existing data management and controls framework
• Support the development of data quality policies and standards that reflect a privacy by design and privacy by default approach
• Support the creation of reports
• Collaborate with the data privacy champion network to help embed and support the adoption of good data governance practices across the group
• Use tools to identify and minimise data exposures.
  
  

Essential Skills

• A graduate with at least 2:2 score in an Honours degree in law or information security related discipline, with no additional requirement for experience in the field. Work experience, even if unrelated to the field, and focus group participation is welcome so do include these in the application.
• A person with passion for privacy and/or information security with HNC, HND, BSc, still studying part-time, or a holder of relevant professional certifications or experience who can evidence paid or voluntary work in the related area.
  
  

SFIA Skills Profile

This role is aligned primarily to SFIA Level 2, reflecting an early-career data protection practitioner who works with guidance, supports established privacy processes and controls, gathers and reviews information, and develops specialist knowledge through practical experience.

SFIA skill

Code

Target level

Application to this role

Information assurance

INAS

2

Assists with reviewing privacy controls and evidence to determine whether personal information is appropriately protected and handled.

Risk management

BURM

2

Supports the identification, recording, assessment and monitoring of data privacy risks and follows agreed escalation and treatment processes.

Information security

SCTY

2

Contributes to protecting personal information by supporting security and privacy controls, reviewing potential data exposures and escalating concerns.

Audit

AUDT

2

Collects and reviews evidence, supports structured control assessments and records findings for review by more experienced colleagues.

Records management

RMGT

2

Supports the maintenance and appropriate handling of records in accordance with established retention, governance and data management requirements.

Learning delivery

ETDL

2

Assists with preparing and delivering data privacy awareness materials, guidance and learning activities for colleagues and data champions.

Data analytics

DAAN

2

Gathers and analyses information to support privacy reporting, identify potential data exposures and assess the operation of privacy controls.

Methods and tools

METL

2

Uses approved privacy, governance and data discovery tools in accordance with documented processes and raises issues requiring specialist attention.

Our Culture

Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.

To find out more about Life at Arnold Clark , visit our website.

Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.