Location: Leeds, United Kingdom

Location: Leeds

6 Month FTC

Risk Directorate

The Bank of England is a diverse organisation. Each of its 4,000 plus people are committed to public Risk management in its broadest sense is at the core of the Banks mission and is central to everything we do. As well as the diverse policy risks managed by the Banks three policymaking committees, the Bank is also exposed to a wide array of financial and non-financial risks.

The Risk Directorate was created following the 2018 internal Risk Governance Review and houses the second line of defence risk and compliance functions charged with providing effective oversight of the Banks financial and non-financial risks and ensuring compliance with its policies. The Directorate brought together various second line functions Bankwide Risk, Financial Risk & Resilience, and the Banks central Compliance Division, including Privacy. The Risk Directorate also includes Business Continuity Management.

Internal Audit forms the third line of Defence for the bank and is part of the Risk Directorate for administration purposes but operates independently.

Department Overview

The Compliance Division sits within the Risk Directorate. Risk management in its broadest sense is at the core of the Banks mission and is central to everything we do. The Banks reputation for integrity and impartiality are key to maintaining our ability to discharge our mission.

The Compliance Division is a second line independent oversight function, responsible for reinforcing a culture of compliance across the Bank.

The Division

The Compliance Division:

• maintains a bank of clear, accessible and sensible policies, overseeing the quality and consistency and enforcing adherence to appropriate governance;
• acts to increase staff understanding of the Banks key policies and controls, designing a training programme to address key compliance risks / breaches / lack of understanding;
• fosters an environment of integrity and ethics and acts as a guardian of the Banks reputation;
• ensures that key policy-linked controls are effective and efficient; and,
• ensures that breaches are appropriately and consistently managed.

The Privacy team is part of the Compliance Division and is led by the Banks Head of Privacy and Data Protection Officer. The Privacy team owns the Banks privacy framework and shares accountability with business areas to ensure that the Bank appropriately manages privacy risk. This includes ensuring compliance with data protection legislation and enabling the efficient and compliant use of personal data held by the Bank.

Job Description

Reporting to the Banks Data Protection Officer and working closely with other Privacy Managers, this is a key role working across the organisation to enable the compliant use of personal data in support of business objectives. The Deputy Data Protection Officer supports the Banks Data Protection Officer by providing professional advice and support to the organisation and contributing to strategy development to ensure that privacy compliance supports the Banks wider organisational goals.

Core responsibilities include:

• Applying expert knowledge to provide high-quality and timely advice on compliance with all aspects of the Data Protection Act 2018, the UK General Data Protection Regulation, and related legislation, often in relation to complex matters requiring significant analysis;
• Leading on the completion of Data Protection Impact Assessments and other privacy risk assessments to assess and explain the impact of proposed changes to business processes and agree appropriate mitigating actions with the Risk Owners;
• Where required, providing advice on the management and resolution of incidents involving personal data, including advising on decisions as to whether to notify regulatory authorities;
• Preparing and drafting reports on privacy risks and compliance for senior management;

Additional responsibilities include:

• Supporting the Banks Data Protection Officer with the management of the Privacy function by leading complex privacy initiatives and workstreams to align with organisational priorities and strategic objectives, developing workplans, managing absences and distribution of work;
• Supporting the Banks Data Protection Officer to carry out statutory obligations including the monitoring of the organisations compliance with data protection law and managing individual rights requests and complaints;
• Deputising for the Banks Data Protection Officer in the event of absence or unavailability.

Number of direct reports: 0

Role Requirements:

Minimum Criteria 

• Demonstrable depth and breadth of privacy expertise gained through roles as a privacy practitioner in large or complex organisations;
• Completion of relevant professional qualifications e.g. CIPP/E, CIPM, CIPT;
• Experience of carrying out Data Protection Impact Assessments.

Essential criteria

• Ability to work to tight deadlines and respond to competing priorities in a fast paced environment, staying calm under pressure;
• Proven ability to analyse complex problems;
• Be able to work autonomously, exercising sound, risk based judgement and critical thinking in relation to privacy risk;
• Be able to understand broader perspectives whilst retaining an eye for detail;
• Excellent verbal and written communication skills, able to explain technical matters to stakeholders in a way that is meaningful to the audience.

Desirable Criteria

• Ability to build internal relationships and networks based on credibility, respect and trust. Strong business focus with the ability to work closely with and influence senior management and key decision makers, with the confidence to challenge, negotiate and persuade where appropriate.

Our Approach to Inclusion