Role responsibilities Provide timely and considered advice and guidance on a range of data protection matters relating to DUAL’s UK businesses. This will include, but will not be limited to: General Data Protection Compliance, as it applies to both commercial and retail customers Processes and controls to ensure ongoing compliance Personal Data Breach Management Marketing DPIA’s Subject Rights Privacy Notices Data Security Supplier management Enhance and embed a data protection framework to ensure compliance with all applicable Data Protection legislation, for UK based entities. Work closely with the Howden Group DPO to improve and drive a Data Protection strategy that is aligned to the operating model of the business and helps ensure consistency. Maintain processes to ensure adequate oversight of compliance posture, including monitoring of compliance with all aspects of the Data Protection Policy. Raise awareness of Data Protection, and support training staff and internal audits. Monitor the completion of mandatory training by DUAL colleagues and take action to ensure maximum take-up. Provide advice on the conducting of and monitoring of data protection impact assessments (DPIAs). Help develop KRI reporting processes. Continually improve Data Protection/ Privacy reporting appropriate for senior management and the Boards. Cooperate with the UK Information Commissioner’s Office (ICO) or relevant supervisory authority Key requirements Five years’ experience within a Data Protection compliance field, to include building, implementing and managing data protection programmes within a complex and enterprise-wide organisation. Specific experience in managing Data Protection risks within a retail financial services environment, including advising on and monitoring processes for meeting data subject rights. Professional qualification with the Data Protection space, and experience in driving compliance improvements in a highly driven and agile entity. Experience with supporting marketing initiatives and the PECR regulations. Detailed knowledge of UK and European data protection law. An understanding of technical and organisational measures that should be in place to ensure the security of personal data and familiarity with information technologies and data security. Experience in compliance monitoring and risk management. What do we offer in return? A career that you define. At Howden, we value diversity – there is no one Howden type. Instead, we’re looking for individuals who share the same values as us: Our successes have all come from someone brave enough to try something new We support each other in the small everyday moments and the bigger challenges We are determined to make a positive difference at work and beyond Reasonable adjustments We're committed to providing reasonable accommodations at Howden to ensure that our positions align well with your needs. Besides the usual adjustments such as software, IT, and office setups, we can also accommodate other changes such as flexible hours or hybrid working. If you're excited by this role but have some doubts about whether it’s the right fit for you, send us your application – if your profile fits the role’s criteria, we will be in touch to assist in helping to get you set up with any reasonable adjustments you may require. Not all positions can accommodate changes to working hours or locations. Reach out to your Recruitment Partner if you want to know more.