Location
London

Hours
Full Time

Salary
Competitive, commensurate with experience

About the Role
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely. Bridewell holds the Gold level Investors in People award which reflects the outstanding calibre that makes us truly one team.

Due to continued growth, we are looking for ambitious individuals who are passionate about Data Privacy and keen to develop and grow with us. As a client-facing Data Privacy professional, you will have extensive experience delivering complex projects and maintaining senior-level client relationships. You will possess a broad range of expertise across Data Privacy and be able to articulate, sell and deliver different Bridewell propositions to our target markets.

Your primary responsibility will be delivering on client engagements, which may include managing one large programme or multiple privacy projects for a select group of clients. Key activities include implementing Data Protection by Design and Default processes, conducting data breach investigations and notifications, performing Data Protection Impact Assessments, managing data subject rights processes, producing privacy notices and policies, advising on data protection matters, developing Records of Processing Activities, delivering training and awareness programmes, conducting third party due diligence, reviewing data protection agreements, identifying and managing privacy risks, and staying current with evolving privacy requirements through research and industry events. You will also collaborate with colleagues to identify sales opportunities and support pre-sales activities.

Experience
- Approximately 4-6 years of professional experience with expert technical knowledge of UK, European and global data protection laws and regulations including GDPR, PECR and UK DPA.
- Relevant certifications such as CIPP/E, CIPM, CIPT, Practitioner Certificate in Data Protection (PDP) or equivalent.
- Practical experience applying data protection in various delivery scenarios including data mapping, responding to data subject requests, managing personal data breaches, conducting Data Protection Impact Assessments, privacy audits, gap analysis and contract reviews.
- Experience developing, maintaining and implementing Data Privacy Frameworks, including during large-scale organisational transformations.
- Skilled in risk management approaches, conducting risk assessments and articulating risk effectively.
- Experience providing independent support and advice on a wide range of privacy issues.
- Experience operating as a Data Protection Officer, including liaison with regulators such as the Information Commissioner’s Office.
- Knowledge of international privacy laws and experience implementing appropriate international safeguards.
- Proficient in IT systems such as OneTrust and applying data protection practically.
- Strong communication skills with the ability to present complex issues and influence decisions at all organisational levels.

About you
- Ambitious and passionate about data privacy with a client-facing mindset.
- Excellent analytical, interpersonal and stakeholder management skills.
- Ability to work effectively within a team environment.

Qualifications
- Relevant professional certifications as noted above.

Desirable
- Previous experience working with regulators or industry bodies.
- Experience working with both Processors and Controllers.
- Exposure to multiple industries or sectors.
- Experience presenting at industry events.
- Experience supporting business development, proposal development and presentations.