Data Privacy Specialist
Porsche Cars GB Ltd, United Kingdom

We are Porsche. We are home to what is, in the extraordinary scale of the automotive world, a small family of passionate enthusiasts - established in 1948 and run in Stuttgart to this day by the same family that bears the company name.

In the UK, we are trusted to represent and care for some of the most exciting, fastest, most advanced and beautiful cars ever created. We work with incredible and often inspiring customers who rightly expect our performance and ambition to match that of our cars.

Being relatively small means we are agile - an environment in which creativity thrives. It also means every one of us makes a difference. When it comes to creating our cars, we sweat the small stuff and we truly care about every part of our business - whether on the road, competing on the track or in styling and dynamics. We are aiming to establish the benchmark in an industry in which the bar is set very high.

With the above in mind we're looking for a Data Privacy Specialist to join our growing team. In this role you will provide advice and support to the UK Porsche Group companies on the topic of data privacy. You will coordinate the planning and implementation of the data privacy compliance strategy across the UK Porsche Group companies;

Planning and Steering:

• Coordinate the planning and implementation of a GDPR/data privacy compliance strategy across the UK group companies;
• Collaborate with the Porsche Group’s data privacy team to steer privacy compliance:
• Coordinate with other compliance personnel to prepare the annual compliance plan to maximise the effectiveness of the compliance program relative to data privacy requirements;
• Maintenance of UK Group companies’ data protection registrations with the relevant supervisory authority
• Support the Data Protection Officer/Data Protection Topic Owner in the delivery of their regulatory duties;

Advising

• Inform and advise the Porsche UK Group companies (and their respective processors and employees) of their obligations pursuant to GDPR and other relevant data privacy legislation;
• Be and act as a Subject Matter Expert for the data privacy topic and provide advice where requested on the topic of data privacy;
• Perform data protection impact assessments;
• Manage Data Subject Access Requests received by the UK group companies.

Communication and Training

• Coordinate, plan and implement data privacy communications and training to all relevant individuals, including the creation of all necessary supporting materials.

Controlling

• Analyse and improve business processes and controls to ensure the business operates optimally to best practice on the topic of data privacy.
• Maintenance of the Porsche UK Group companies’ Record of Processing;

• Management of the data privacy topic within the company’s Internal Control System, including the creation, implementation review and maintenance of controls and monitoring tools required to ensure data privacy compliance (including Company directives, procedures, privacy policies and consent notices);

• To analyse and improve business processes and controls to ensure the business operates optimally to best practice on the topic of data privacy.

Monitoring

• Develop and oversee the implementation and ongoing monitoring of data privacy compliance within the Porsche UK Group organisaiton;
• Proactively take responsibility to identify, assess, manage and report data privacy risk issues as part of the Company’s wider risk management programme;
• Track developments in data privacy legislation and Data Protection Authorities guidance/enforcement actions/policies, and proactively update company policies, procedures and strategies;
• Assist with the investigation, resolution and reporting of data privacy complaints and breaches. If appropriate, undertake root cause analysis to reduce risks arising from such issues and update company controls and provide further training where necessary;
• Prepare and provide regular reports on data privacy compliance program priorities, status of work plan completion, monitoring results and compliance investigations relevant to data privacy.

The list of Core Specific Responsibilities is not exhaustive. The job holder is expected to carry out other duties as reasonably assigned from time to time, in line with their ability. The Company reserves the right to vary the role content, within reason, with consultation and agreement, in accordance with business requirements.

Requirements

Required:

• A university degree
• Ideally 8 years’ experience in a compliance and controlling role
• Change management e

Job Rewards and Benefits