Job description

Data Protection Officer

Full-time - Dundee, Glasgow or Edinburgh

Welcome to a very different kind of law firm. One that recognises its success is down to its people. Where you can be yourself. Be inspired by your talented work colleagues. Where you’ll feel part of a dynamic team. Where, right from the start, you will be trusted with responsibility. This is what a rewarding career looks like at Thorntons.

What to expect

Data Protection is a key area of growth for Thorntons. The data protection landscape is constantly evolving and providing new and original challenges for our Clients. We recognise that it has never been more important to be at the forefront of developments in Data Protection, and we welcome candidates who share the team’s passion and commitment. Our team provide data protection and compliance advice, including fully outsourced Data Protection Services, to clients in a wide range of sectors. The team love the work that they do and are truly supportive of professional growth. We are now looking for a DPO to support our growing outsourced DPO services. In this role you can expect to work closely with clients in support of their ongoing data protection needs.

Typical duties and responsibilities include:

• Acting as a point of contact for clients, working with minimal supervision advising on all areas of data protection law and compliance
• Conducting data protection gap analysis’
• Creating and supporting implementation of data protection compliance plans
• Advising on UK & international data sharing & data processing arrangements
• Facilitating data protection impact assessments, legitimate interest assessment, transfer risk assessments and managing risk for new processing activities
• Drafting Data Protection related notices, policies and registers
• Design and delivery of bespoke client training
• Advising on complex Subject Access and other data subject requests
• Supporting with response and resolution of personal data breaches and liaising with ICO on behalf of clients
• Legal research on complex data protection issues
• Coordinating completion of ROPAs
• Mentor and supervise more junior members of the team
• Engagement in team business development activities
• Keep up to date with changes in data protection law

What we’re looking for

For this role, we are looking for a candidate with the following skills and experience

• Data Protection/Privacy Officer acting as or supporting a DPO
• An EU or UK GDPR or IAPP qualification (CIPP/E, CIPM, CIPT) is ideal but not essential
• Minimum 4 years’ experience working in senior data protection role
• Excellent working knowledge of GDPR, PECR and DPA and sound working knowledge of other relevant areas of law
• Commitment to keeping technical expertise up to date, recognises issues that require research, allocating resources and directing as required.
• An ability to quickly develop a full understanding of multiple client information systems and their data security and data protection needs.
• Proactively proposes solutions to problems to clients and colleagues
• Ability to develop strategies for the most complex matters, plus ability to argue all matters constructively and succinctly
• Ability to work to tight deadlines and handle various projects simultaneously
• Excellent time management, financial and organisational skills
• Good commercial awareness and business development skills
• Actively networks and develops meaningful relationships with clients and potential clients
• Invests time in developing others and contributing to team morale.
• Masters difficult technical concepts. Anticipates problems and takes responsibility for developing solutions
• Ability to work independently and takes personal responsibility for delivering quality results and encourages others to do so
• Communicates in a clear, concise and professional manner verbally and in writing, demonstrating excellent attention to detail

Doing What’s Right

A great working environment is the first thing you’ll notice. One where you’ll be inspired and supported by your colleagues. Where we’ll help you achieve what you want from your career. Where you can have both flexibility and connection with our supportive culture. Where you are valued. Where your voice is heard and you can make a difference through our employee network groups.

As your employer

Our benefits package goes well beyond competitive remuneration and we recognise and reward the hard work and effort you put in - learn more at rewarding you

For your Health and Wellbeing

Our Healthcare Cash Plan covers things like dental, optical, physiotherapy, chiropody, therapy and health screening needs. Our mental health first aiders and access to a 24-hour counselling line provide support for your mental and emotional wellbeing.

Embracing Diversity and Inclusion

We strongly believe in a diverse and inclusive working environment: one that does not tolerate any form of discrimination at any level. We value a truly diverse workforce: we are all equally different. We celebrate our individuality: from gender, sexual orientation, ethnicity, faith to life experience, we know our differences make us stronger, together.

For our Community

We’re proud to be part of the communities we serve across Scotland, that’s why we actively engage with charities that support them. From our annual Charity Wills campaign to regular fundraising and volunteering opportunities, our colleagues give back to communities with skills and advocacy as well as funds.

Apply on our website or send us a CV at [email protected] stating the Job Title and Location.

Job Type: Full-time

Benefits:

• Company events
• Company pension
• Cycle to work scheme
• Referral programme

Schedule:

• Monday to Friday

Experience:

• Senior Data Protection: 4 years (required)

Work Location: Hybrid remote in Dundee