- Lead activity to embed the firm’s Data Strategy and Control Framework: To recognise data as a strategic asset, and ensure that it is used responsibly and ethically- Establish, and agree high risk data processes with relevant safeguards and controls in place to support the business- Ensure Data Risk and ethical considerations are built into project and engagement lifecycles, and the development and use of new and emerging technology- Collaborate with the firm's Chief Data Office to develop and implement Data Risk related policy and associated guidance materials, ensuring they are available to the firm at all times. - Lead upskilling and communication activity in relation to Data risk- Act as a point of contact and advise on complicated and complex data use case queries

Manager and GDPR SME as part of the firm's Data Protection Team. Deputy DPO for the Tax LoS support on Sales and Marketing ActivityAs part of a team, responsible for assessing data protection by design and default programme across new technologies, vendor privacy compliance, advising on international data transfer requirements and reviewing privacy related contract terms.Completing data protection assessment to review data processing riskManaging privacy related transparency requirementsResponding to data incidents, implementing mitigations and advising on escalationEnsuring privacy by design and by default is implemented across new solutions and internal initiatives; Supporting colleagues with privacy related matters and providing ad hoc and tailored privacy guidance as necessary

Lead role in the GDPR readiness project in support of the Data Protection Officer in the delivery of the project planTo be an expert for all aspects of data protection compliance, including the creation and update of policies and guidance, the provision of detailed and tailored guidance to staff at all levels, staff training and awareness campaigns and organisation compliance audits; To assist the Compliance Manager in ensuring corporate compliance with the Freedom of Information Act (FOIA), and associated general access to information regimes, including subject access; Creating and implementing an annual corporate program of DPA specific compliance checks (audits), including detailed guidance notes;Investigating any reported breaches of the DPA; reporting findings and recommendations to relevant departments and senior management;Devising and continuing to manage an on-going corporate program of regular DPA awareness presentations across the organisation;Designing and monitoring of mandatory DPA e-learning course using the corporate training platform; monitoring of all feedback and responding to evaluation comments;Initiating a bi-annual DPA corporate awareness raising campaign, including a series of guidance posters, emails to all staff, intranet news items and table cards;Continuous research of published guidance, codes of practice and regulatory action for use in the formulation and updating of corporate guidance and best practice material;Responsible for annual renewal of DPA notifications and updating notification details;Monitoring corporate compliance with FOIA requests and Subject Access Requests under the DPA,providing guidance and managing requests directly from a detailed knowledge of the legislation.Day to day management of Compliance Assistant: allocating tasks; setting objectives; supporting development.