Job Introduction
Handelsbanken is a local relationship bank with a decentralised way of working, a strong local presence due to a nationwide network of over 200 branches and a long-term approach to customer relations. Throughout the organisation, individuals enjoy wide-ranging responsibility, and the scope to pursue a unique career, within a culture of openness, equality and professionalism. This role sits within the Regulatory Compliance team which is part of the UK Complliance functionand reports to the Data Protection Officer. The role will be based in either London or Manchester and will require travel within the UK and occasionally to other countries in which the Bank operates.
Main Responsibility
To act as the deputy data protection officer (DPO) for Handelsbanken PLC under the UK General Data Protection Regulation (UK GDPR) and to facilitate Handelsbanken PLC compliance with the GDPR and other applicable data protection legislation through ensuring systems and controls are in place to enable Handelsbanken PLC, including its managers and employees, to comply with their legal obligations. Act as intermediary between relevant stakeholders, including supervisory authorities, data subjects, and business units within Handelsbanken PLC. Act as Handelsbanken PLC focal point for 2nd line data protection activities and foster a good data protection culture within the organisation.
The role of a Deputy DPO is to:
- To provide support and deputise for the Data Protection Officer;
- Work collaboratively with the Privacy, Policy and Awareness team, colleagues in Compliance, Legal and InfoSec as well as the wider business to ensure that legal and regulatory requirements / best practices relating to data protection laws and regulations are effectively identified and implemented;
- Review / provide guidance on the development of compliance related policies, procedures, processes and controls to facilitate compliance with applicable laws and regulations;
- Work closely with the wider Risk & Compliance team to provide holistic support to the business;
- Facilitate the identification, investigation management and resolution of compliance related issues;
- Prepare relevant compliance reporting to meet both internal and external regulatory requirements;
- Engage with 1LOD operational business teams to inform and advise the banks employees about its obligations to comply with data protection laws and regulations;
- Monitor compliance with the UK-GDPR and other data protection laws, and with our data protection policies, including managing internal data protection activities and conducting compliance reviews;
- Ensure that we remain properly registered under the law and maintains an active article 30 register of processing activities, driving audit and associated data management processes;
- Manage data privacy breaches or near misses, support the identification of the root cause, mitigations and monitor implementation to prevent recurrence;
- Work with the business to implement compliance with data protection laws and regulation into its transformation programme;
- To assist with the development and implementation of the Data Protection Strategy across the bank; and
- To ensure the bank comply with all legal requirements including the Data Protection Act, UK General Data Protection Regulations, PECR, Records Management standards and all other relevant national standards. Horizon scan and keep abreast of any regulatory or other changes relating to data protection that may affect Handelsbanken PLC and, as necessary inform Handelsbanken PLC in good time of any actions that need to be taken.
- Keep abreast of emerging technologies/communication channels that are relevant to data protection.
- Monitor ICO guidance, enforcement actions and policies.
- Network with data protection and information security professionals outside Handelsbanken PLC to gain insight into good practice across the industry.
- Liaise, as required, with Handelsbanken PLC legal team to ensure appropriate sharing of information and consistency of approach.
- Complete 2nd line compliance reporting, which assesses the effectiveness of Handelsbanken PLC’s data protection arrangements and makes appropriate recommendations for improvement.
The Ideal Candidate
The successful applicant must act with integrity and have an understanding of UK privacy regulations best practice and key regulatory requirements. Experience in contract reviews and procurement would be useful, but is not a requirement. They will also ideally:
- hold a data protection professional qualification and/or equivalent technical knowledge
- have practical experience of UK data protection law (e.g. DPA, PECR, UK GDPR, Lawful Business Practice Regulations) and regulatory codes of practice in financial services
- maintain good knowledge of retail banking products and operations
- be able to plan, organise and prioritise tasks and projects
- have the ability to solve problems creatively and effectively
- have excellent interpersonal and communication skills in both written and spoken English
- demonstrate a proven ability of building positive cross functional working relationships
- able to influence decision making to surface and mitigate issues and risks across a wide network of stakeholders, including senior management and product owners
- demonstrate strong analytical ability and a structured approach
- have a drive to succeed
- evidence the ability to work independently, and collaboratively, as a strong team player
Package Description
Competitive + Benefits
About the Company
Handelsbanken is a relationship bank with a decentralised way of working, a strong local presence thanks to a nationwide network of branches, and a long-term approach to customer relations. Each Handelsbanken branch operates as a local business enabling it to make decisions at a local level and provide a bespoke service. The focus is always on the need of the individual customer and not on the sale of specific products.
The Bank is deeply committed to embedding good equality and diversity practice into all of our activities. This is so that we are an inclusive, welcoming and inspiring place to work that encourages everyone to apply, regardless of socio-economic background, age, disability, pregnancy and/or parental status, race (including colour, nationality, and ethnic or national origin), veteran status, marital and civil partnership status, religion or belief, sex, gender reassignment or sexual orientation.