Cyber Security Compliance Manager

As a Cyber Security Compliance Officer, you are the guardian of our organisation's data governance and compliance framework. Your expertise will ensure that our data handling practices are in strict adherence to global data protection regulations and standards. This role is critical in navigating the complexities of data privacy laws, implementing robust data governance strategies, and instilling a culture of data ethics and compliance throughout the organization. Essential Duties and Responsibilities: Regulatory Compliance: Maintain expert knowledge of global data protection laws (e.g., GDPR, CCPA, DPA(UK)), and ensure our data governance policies and practices are up-to-date and compliant. Data Protection Officer: Maintain records of all data processing activities of the company, serve as point of contact for data protection authorities. Risk Management: Identify, evaluate, and mitigate risks associated with data privacy and compliance, implementing a risk management framework that aligns with global standards. Policy Development: Develop, review, and enhance data protection policies, standards, and procedures, ensuring they are effectively communicated and adhered to across the organization. Data Governance Framework: Establish and maintain a data governance framework that ensures data is managed according to legal, regulatory, and company requirements, enhancing data quality and accessibility. Training and Awareness: Lead educational initiatives on data protection and compliance, ensuring all employees are aware of their responsibilities regarding data handling and privacy. Compliance Monitoring: Conduct regular audits and assessments to ensure ongoing compliance with data protection laws and internal policies, addressing any identified gaps or issues promptly. Stakeholder Engagement: Act as the primary point of contact for internal and external stakeholders, including regulatory bodies, on data compliance matters. Incident Management: Develop and oversee the process for handling data privacy incidents, including breach response and notification procedures. Major Incident Management: Work with law enforcements and public bodies in the event of a Major Incident around Information Security and Data Breaches, where appropriate. Qualifications: Knowledge, Skills, and Abilities: Expertise in Data Protection Laws: Comprehensive understanding of GDPR, CCPA, DPA(UK), and other relevant privacy regulations. Risk Assessment: Strong ability to conduct risk assessments, privacy impact assessments, and implement necessary controls. Strategic Planning: Capability to develop and implement data compliance strategies that align with organizational goals and regulatory requirements. Analytical Skills: Proficiency in analysing compliance issues, interpreting data privacy laws, and applying them to operational practices. Communication Skills: Excellent verbal and written communication skills, with the ability to effectively communicate complex legal and compliance issues. Leadership and Collaboration: Proven leadership abilities with experience in fostering a culture of compliance across diverse teams. Problem-solving: Innovative problem-solving skills with a proactive approach to identifying and addressing compliance challenges. Attention to Detail: A meticulous attention to detail, ensuring accuracy in policy documentation, regulatory filings, and compliance reporting. Educational/Previous Experience Requirements: Formal education in Information Systems, Cybersecurity, or a related field is highly desirable. Minimum of 10 years of experience in data protection, privacy compliance, or a similar role, preferably within the financial services sector or a highly regulated industry. Certifications: Professional certifications such as CIPP/E, CIPM, or CIPT are strongly preferred. PRB