Data Protection Executive

About this role

Salary: £37,000 to £40,000 per annum
* 2 positions available*
Hours: 12 month fixed term contract, 37.5 hours per week, Monday to Friday.
Reports to: Senior Data Protection and Internal Audit Manager
Location: Harlow, Essex. Easily commutable from London Liverpool Street or Tottenham Hale Station. We offer a free minibus service to/from Harlow Town Train Station as well as free parking and EV charging on site.
Extra Information: Based 2 days per week at our office in Harlow, Essex, 3 days working from home however some flexibility to come into the office more often might be required.

About the role:
In this role you will manage and deliver on second line data protection assurance activities and responsibilities of the Charity.
You will

• Objectively review and ensure the organization complies with internal data protection regulations and established control protocols,

• Provide assurance that the organisation is compliant with necessary data protection laws and regulations and ensure it remains so.

• Support the Data Protection Officer with data protection, including embedding the culture and framework across the organisation.

What you will be doing:

• Record, coordinate and support responses to Data Subject Rights Requests (including DSARs), contributing to responses in line with statutory timescales, internal procedures and regulatory guidance.

• Support evidence gathering across systems and teams, including use of eDiscovery or search tools where appropriate, under the direction of the DPO.

• Apply a working understanding of the UK GDPR rules relating to data subject rights, including exemptions, extensions, redactions and third-party considerations.

• Record and monitor data breaches and near misses.

• Liaise with departments to perform initial review and response to Data Protection Impact Assessments.

• Manage the DPIA review cycle to ensure areas are periodically revisited.

• Monitor the Record of Processing Activities with departments and ensure remains up to date.

• Respond to management’s initial enquiries regarding data protection/GDPR so as to help management comply with Motability’s obligations to keep personal data secure, referring matters onwards to the DPO as appropriate.

• Challenge data retention justifications, including where and how data is storage and managed in practice.

• Present summarised findings from data protection assurance reviews of processes to Data Protection Officer.

• Monitor the GDPR risk register for the business and ensure actions are completed.

• Deliver data protection audits across the business in accordance with UK GDPR and DPA 2018 requirements to ensure controls operate effectively and compliance is maintained.

• Monitor and manage data protection audit action completeness by management.

• Assist colleagues in respect of UK GDPR/DPA 2018 training requirements.

• Provide assistance for data protection, internal audit and risk functions including ad hoc projects and tasks that may be reasonably requested to support the Risk, Controls and Compliance Manager.

Your experience:
Must haves:

• Understanding of data subject rights under UK GDPR, including practical experience supporting or delivering DSAR responses.

• An understanding of data protection regulations (DPA 2018, UK GDPR)

• Data Protection experience, ideally gained through a charity or health sector.

• An analytical thinker with attention to detail, you will be able to form good judgements and think objectively.

• Ability to manage competing deadlines and sensitive information when handling statutory requests under time pressure.

• Ability to work effectively on your own or as part of a team.

• Organised and resilient under pressure, adaptable to change.
Nice to haves:

• Exposure to the use of eDiscovery, search or document review tools to support DSARs, investigations or litigation disclosure.

• Experience applying DSAR exemptions, extensions and redaction decisions in practice.

• Experience of communicating and managing challenging situations.

• Exposure to presenting findings and reports to Senior Management.

• Experience of internal audit or risk management.

• Exposure to technology‑enabled review, monitoring or assurance tools used in data protection or compliance functions.

If you’re interested in applying and excited about working with us but are unsure if you have the right skills and experience, we'd still encourage you to apply.
Benefits
Who are we?
We are building a future where all disabled people have the transport options to make the journeys they choose.
We fund, support, research and innovate so that all disabled people can make the journeys they choose. We oversee the Motability Scheme and provide grants to help people use it, providing access to transport to hundreds of thousands of people a year. We award grants to charities and organisations who provide different types of transport, or work towards making transport accessible. We also carry out ongoing research, in partnership with disabled people and key stakeholders in the industry, to inspire innovations that continue to champion accessible transport for all.
Why choose us?
We want working for the Motability Foundation to be the best career move you’ve ever made. When you join the Motability Foundation you will join a group of people who are supportive, innovative and motivated to improve the lives of our beneficiaries.
We value everyone’s unique qualities and celebrate having a diverse, equitable and inclusive culture where everyone feels safe to be their authentic selves. This is embedded into our values, Collaborative, Respectful and Evolving.
We bring our people together through our People Forum, Equity, Diversity and Inclusion Forum, Social Squad and our Wellbeing Champions and our employee Spotlight Awards help us recognise the excellence and dedication of our staff.
We are proud to be recognised as Disability Confident Leader, have attained Platinum Level Award for…