Senior Global Data Protection Specialist

Canopius

Full-time

London, GB

19h ago

Job Description

The Role

This role supports the Group Head of Compliance/Data Protection Officer and Group Data Protection Manager in delivering and maintaining the Group's Data Framework across all jurisdictions. Working closely across the business, you will provide pragmatic, risk-based advice and help embed consistent privacy practices and controls throughout the Canopius Group.

Opportunities Available: As part of the continued development of the team, we have 2 exciting opportunities available. A permanent role, newly created to strengthen the team's capability and support future growth. A 12 month Fixed Term Contract, providing maternity cover. The responsibilities, skills and experience requirements are the same for both positions. Applicants will be able to indicate their preference for either the permanent role, the fixed term opportunity, or both!

Responsibilities

Role Responsibilities will include

• Act as a key contributor within the Group Data Protection Function, supporting the delivery of practical and risk-based data protection guidance, working within established Group frameworks and policies on new products, systems, outsourcing arrangements and material business change initiatives.
• Support the Data Protection Officer (DPO) with compliance monitoring activities, in line with applicable data protection legislation and Group policies, identifying areas for improvement or escalation.
• Assist with maintaining data protection policies, procedures and accountability frameworks, including data retention.
• Assist with maintaining Group Records of Processing Activities (ROPA) and supporting ongoing data governance initiatives.
• Review and maintain privacy notices and cookie consent management to ensure compliance with applicable data protection and e-privacy requirements.
• Work with Canopius stakeholders to conduct Data Protection Impact Assessments (DPIAs), identifying risks and contributing to recommended mitigating actions, with escalation to the Data Protection Manager and/or DPO where appropriate.
• Handle data subject rights requests and data protection complaints, ensuring timely and compliant responses in accordance with applicable regulatory requirements and internal standards.
• Support the DPO and Group Data Protection Manager with the investigation of personal data breaches, including risk assessment, root cause analysis, internal escalation, regulatory notification activities, and post-incident remediation actions, in line with established processes and with escalation where appropriate.
• Contribute to the design and delivery of privacy training and awareness activities across Canopius.
• Collaborate with regional compliance teams and business stakeholders to support the consistent implementation of Group privacy standards.
• Support the implementation of data transfer mechanisms and the delivery of Transfer Risk Assessments (TRAs) as required, escalating complex issues where appropriate.
• Support the review of vendor contracts, Delegated Claims Authority (DCA) agreements and other third-party data sharing arrangements, working closely with Procurement and Legal and contributing to advice on data protection clauses in line with regulatory requirements and the Group’s risk appetite
• Maintain awareness of relevant regulatory developments and support associated implementation activities where required.
• Provide informal guidance to junior compliance colleagues on data protection issues.
• Continue to develop subject matter expertise through continuing professional education, training courses, seminars and conferences.
• And other ad hoc duties as required.