Data Protection Specialist

This is a hybrid role where you’ll work alongside your colleagues in the office at least 2 times per week.

Our goal at CityFibre is to unlock the digital potential of Britain by creating a broadband network that works seamlessly for everyone, every day. Powerful, gigabit-speed connections that enable people across entire communities to enjoy life in full flow. To do this, we make sure that our people’s voices are heard, their ideas are welcomed, and everyone is given the opportunity to make a real impact.

We encourage change, have a challenger mindset, foster innovation and nurture a welcoming, inclusive and supportive community. In this environment we allow you to bring your best-self to work every day, helping you to achieve your goals, grow your career and reach your full potential.

We’re a Times Top 50 Employer for Women; are endorsed by WORK180; have pledged our commitment to the Armed Forces Covenant; and are a Disability Confident Employer. Working together with our Employee Networks, we’re committed to changing the industry for everyone. 

What you can expect from us

Everyone at CityFibre has an important part to play, and we reflect that in our benefits. With a salary up to £45,000 depending on experience, when you join us, you’ll also enjoy 25 days’ holiday, a day off on your birthday, a day off to support a charity or organisation of your choice, a performance-related bonus scheme, and private healthcare.

We believe we deliver our best when we work together. It’s the way we do things, trusting and giving our people the autonomy to manage their own day-to-day, promoting wellbeing, whilst still prioritising time together with our colleagues to connect, collaborate and share our ideas.

How you’ll change it up

The purpose of this role is to develop, implement and enforce data protection policies, procedures, and protocols to ensure group compliance with data protection laws and regulations. There will be a requirement to be hands-on with Subject Access Requests and Right to Erasure Requests, using existing tooling to retrieve the relevant data and liaise with the internal Legal team. Day to day, this is some of what you can expect to be doing:

• Develop and implement data protection policies, procedures, and protocols to ensure compliance with the Data Protection Act 2018 (UK GDPR).
• Managing data subject access requests and right to erasure requests, including performing searches within Microsoft Purview eDiscovery and liaising with data subjects
• Conduct regular audits and assessments of data protection measures and practices within the organisation including populating Article 30 records of processing activities.
• Collaborate with IT and Security teams to ensure the confidentiality, integrity and availability of data stored in corporate systems.
• Monitor and respond to data breaches, incidents and data protection queries from the wider business, including investigating the root cause and implementing corrective actions.

What you’ll bring to the role

It’s important that you have proven experience of developing and implementing data protection policies and procedures in the UK. Experience in a similar role handling subject access requests and right to erasure requests under UK GDPR. You’ll also bring some of the following to the role with you:

• A recognised professional data protection qualification
• Proven experience of the Microsoft Purview suite of applications, including but not limited to eDiscovery, Data Lifecycle Management, Information Protection and Data loss Prevention.
• Experience conducting privacy reviews, control assessments and privacy impact assessments.
• Strong understanding of information security controls and principles and their fundamental link to data protection

We’re looking for people who don’t settle for ‘good enough’ and push things forward. If you’ve just found yourself thinking, ‘I’d love to do this’, we want to hear from you. Let’s change it up.

Diversity, Inclusion and Belonging

Our people have a wide range of experiences and perspectives – and it’s this diversity of thought that makes us who we are.

CityFibre is working hard to change up the telecoms industry. This means we’re committed to providing equal opportunities to people from all backgrounds and commitments, including your carer and family status, ethnicity, sexual orientation, religion, age, disability, gender and gender identity. We’re also offering training programmes and placement opportunities to support the skilled, career changers, service-leavers, and returning workers to become part of our teams.

If there’s any additional support or adjustment you require in the application process to help you achieve your best, please get in touch by emailing careers@cityfibre.com. We’re here to support you in changing up your career.