Design and implementation of GDPR Control Framework across the full organisation.Monthly Control Operational Effectiveness Testing of all controls within the GDPR and Loan Sale Control Frameworks.Production of monthly Management Information for the GDPR and Loan Sale Control Frameworks on behalf of the Head of Assurance Services, for distribution to Senior Management & Executive Leadership Teams.Engagement with stakeholders at all levels of the organisation, in both a business support and escalation capacity when controls are found to be ineffective, due to both operating and design exceptions.Knowledge of security controls through involvement with Control Operational Effectiveness Testing for the Security Control Framework.Continuous improvement of control frameworks and processes, driving efficiency and identifying benefits to the team and stakeholders.Previous experience within the Data Protection Office which involved responding to data subject and ICO complaints, reviewing and critiquing DPIAs, and producing monthly Management Information on behalf of the Data Protection Officer.

Acting as the GDPR project lead for small-medium organisations in Scotland. Providing consultancy services, drafting policies and procedures, creating registers and logs, and drafting privacy notices. Reviewing and critiquing contracts and agreements to ensure compliance with GDPR. Attending client sites on a regular basis to assist with information audits, document reviews and to provide generic data protection advice. Providing clients with a helpdesk facility for any questions or issues related to GDPR, PECR (2003) and the UK Data Protection Act 2018.

Attending various client sites to fulfil or assist in the fulfilment of contractual obligations in relation to client preparations for the EU GDPR.Attending client sites to conduct Data Protection audits and GDPR Gap Analyses.Writing up notes, opinions, reports and other documents as required to fulfil company obligations and satisfy client needs.Carrying out research both into the privacy arrangements of clients as well as into technical aspects of privacy and data protection law, legal cases, undertakings, official guidance and the professional opinions of other practitioners.Supporting and assisting clients to develop and implement appropriate policies and other actions and to ensure that they are complied with.

Coordinating the end-to-end global Data Subject Access Request process.Privacy Impact Assessments - assessing the personal (sensitive) data stored and processed in both existing and new IT solutions for compliance with the Shell Data Privacy Manual, BCRs and local Data Privacy Legal legislation.Leading the migration of the SAR and PIA process activities to Shell Business Operations Krakow, including onboarding and training of Senior Data Privacy Support Analysts.Supporting the Central Privacy Office and the Shell group of companies globally to meet legal and regulatory data privacy requirements and preparedness for the EU GDPR.

Business support services provided for the global assurance planning & tracking tools, completing user requests ensuring the correct approval matrix has been followed. Production of monthly KPI reporting to support management information.