Overview

Reporting to our Data Protection Team Manager, the Data Protection Consultant will work directly with our clients to scope, analyse and implement data protection practices, processes and procedures. In addition to this, the Data Protection Consultant role will complete and oversee the delivery of gap analyses, implementations and DPO services to our wide variety of customers.

The Data Protection Consultant will need to have excellent stakeholder management skills, as well as being able to manage their own time and projects, bring new ideas to the team and have a good understanding of information security standards and certifications. Due to the nature of the role, the position requires the ability to manage multiple clients simultaneously whilst ensuring a customer-centric approach.

Responsibilities

• Lead and manage Data Protection projects, ensuring delivery is in line with client expectations;
• Act as an SME for all GDPR, PECR and other privacy-related matters;
• Work closely with the Sales to scope projects;
• Conduct Data Protection Gap Analyses and Data Protection Implementations (data mapping, developing policies and procedures, records of processing, DPIAs, LIAs etc.);
• Work closely with the Data Protection Management Team to oversee the project management, scheduling and delivery of all GDPR projects, completing and updating relevant records for reporting purpose.
• Deliver Data Protection training as well as supporting clients with GDPR documentation, data breaches, and data subject access requests;
• Write content for articles and blog posts on data protection related topics;

• Any other appropriate job duties in line with the associated skill and experience of the post holder.

Skills and experience required

• Direct experience of leading Data Protection consultancy projects (scoping, gap analysis, and implementation) across small, medium and large businesses, with a strong understanding of tailored service delivery to suit client size and requirements;

• Qualified in one or more of the following: GDPR Practitioner (or equivalent), Certified DPO, IAPP CIPP/E qualification, Law Degree with a focus on GDPR/Privacy;

• Knowledge of CCPA and other international privacy laws highly desirable;

• Strong Microsoft Office skills;

Personal Attributes

• Ability to remain calm under pressure and meet deadlines; 
• Strong organisational skills with a high attention to detail; 
• Ability to prioritise and handle multiple tasks at any given time; 
• Pro-active and enthusiastic with a can do attitude; 
• Excellent verbal and written communication skills;
• Strong commercial acumen; 
• Ability to work on own initiative as well as being a team player;
• Willingness to learn.

Other

• International and national travel should be expected as part of the role;
• Must be eligible to live and work in the UK;

Benefits

• 25 days annual holiday;
• An additional day’s annual holiday for your birthday;
• Company Pension contribution;
• Subsidized gym membership;
• Perkbox employee benefits platform;
• Frequent team events;
• Relaxed working environment;
• Private Healthcare (individual cover only);
• Learning Allowance Benefit – a reimbursable benefit of £100 per annum (or equivalent) for you to spend towards your personal career development;
• Flexible / hybrid working policy.

Company Overview

Bulletproof is a trusted provider of innovative cyber security and people-powered solutions. Our cyber security services are the best way to stay ahead of the hackers, take control of infrastructure and protect business-critical data.

With our own in-house UK Security Operations Centre (SOC) and years of industry experience, we help to protect our customers from current and emerging security threats. We provide a full spectrum of cyber security services including CREST-certified penetration testing, 24/7 threat monitoring, compliance support and security training to help organisations protect against today’s evolving threat landscape.

Please note that as part of the recruitment process a criminal records check will be carried out by an authorised third party.