QHSE - Quality and Methods Officer

Job title

Quality and Data Protection Officer M/F

Contract type

Permanent Cont.

Job Description

Job purpose

Maintain and improve ALTEN Ltd Quality Management System to ensure it conforms to customers, regulatory, standards, and ALTEN Group requirements.

Responsible for the internal application of the provisions of the UK GDPR, Data Protection Act 2018, and the compliance with ALTEN Group, Methods, and customers’ requirements.

Main Duties And Responsibilities

Data Protection:

You will work closely with The UK Group Head of Compliance and Security, the Group Privacy Manager at ALTEN Group level, and other DPCs in the Group.

Your main responsibilities are:

• Developing, reviewing, and updating the company’s data protection framework, policies, and guidelines, bringing together and harmonizing a UK approach to data protection and GDPR.
• Acting as the contact point for data subjects in connection with the processing of their personal data and handling of Subject Access Requests (SARs) for the group in the UK.
• Managing and responding to data breaches and incidents, ensuring timely notification, management of actions, and mitigation measures based on root cause analysis.
• Supporting Risk Assessments, including Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs).
• Maintaining all required registers of personal data processing and retention.
• Ensuring privacy by design and by default is embedded into new projects, processes, systems, and services.
• Acting as the primary contact for and cooperating with the supervisory authorities.
• Informing and advising your entity and its employees who carry out processing, of their legal data protection obligations.
• Monitoring data processing agreements with third parties and ensuring compliance with contractual and regulatory requirements working closely with in-house legal counsel.
• Coordinating employees' training and awareness programs on data protection and privacy.
• Advising senior management on strategic data protection risks and opportunities.
• Providing guidance and actively supporting the departments regarding the replies to tenders, integration of data protection policies in their processes, inspections, audits, and data protection incidents.
• Monitoring the implementation of and compliance with data protection regulation, the policies, and strategies of the organization in relation to the protection of personal data.
• In cooperation with the Legal department and the Group Privacy Manager, proactively considering upcoming changes in laws and regulations of data protection impacting the business and communicating with the heads of departments regarding trends and risk mitigation strategies.
• Conducting regular data protection audits.
• Cooperating with the Information Security compliance officers to ensure best practice and compliance is aligned.