Data Protection Compliance Assistant – Thorntons

Flexible on Location

Thorntons’ Data Protection Team are specialist experts in data, privacy and security and provide advice to a range of clients from small tech companies to large corporates and public bodies in relation to data protection. We also offer fully outsourced Data Protection Officer services to clients and, due to the growing demand for these services, we now have the opportunity for a Data Protection Compliance Assistant to join the team.   Our hybrid working approach allows for a blend of working at home as well as in the office. For this role, your base office can be any of our Thorntons offices

Where every day is different

You will support the wider team in working with clients across a broad range of sectors including technology, healthcare, research & development, retail, education, professional services and beyond. You will assist with data protection audits and data protection impact assessments, analysing risks with a commercial outlook and making practical recommendations. You will also assist with drafting privacy notices, cookie notices and data protection related policies; research complex data protection issues and assist clients processing freedom of information, subject access and all other data subject requests.

About You

You will be an experienced data protection professional or have experience of working in a heavily regulated environment and a strong desire to develop expert knowledge of data protection laws. The ideal candidate for this role will have a degree in Law, Information Security or Risk Management or CIPP qualification and/or experience in data protection or an information security compliance role. You should have a positive attitude, good teamwork skills and be confident engaging with clients. Excellent time management and organisational skills are essential. You will also have the ability to absorb and interpret detailed regulation, relay information clearly and succinctly and the ability to balance risk with commercial considerations.

About Us

Thorntons is one of the largest and most respected full service law firms in Scotland, working with a broad range of clients across the private, public and third sectors. The strength of our foundations and diversity combines with an innovative and people–centred approach, differentiating Thorntons from many other law firms and resulting in significant growth in recent years, with ambitious plans for further expansion. Throughout our expansion, our focus has remained with our clients, colleagues and communities and people are at the heart of everything that we do.

We are progressive and ambitious. While we expect high standards from our people, we recognise and value the contribution they make to our business – and our success. We see the whole person, not just the person in the workplace – and we’re aware that our people have busy lives outside work. It’s simple common sense: do our best for our people and they’ll do their best for us. At Thorntons we pride ourselves on doing what is right, and as two time winners of the Scottish Business Insider Employer of the Year Awards you can see why our People choose, and enjoy a career with Thorntons.

Hours

• Monday to Friday, 9am – 5pm, 35 hrs per week.

Benefits

• Competitive Salary
• Investment in Training, Development and Career Advancement Opportunities
• 25 days’ holiday (rising with length of service to 30 days) plus 7 public holiday
• Contributory Pension Scheme
• Healthcare Cash Plan
• Corporate Discounts
• Cycle to Work

Please apply online at www.thorntons-law.co.uk/careers or send a CV to people team@thorntons-law.co.uk. The closing date for applications is 9am on Monday 23 May.

Job Description

Data Protection Compliance Assistant

Reports to: Partner & Director, Data Protection Services

This role within Thorntons Data Protection Team exists in response to the growing demand for data protection services. The role offers an opportunity for an experienced data protection assistant to support the wider team in working with a portfolio of the firm’s clients spread across a broad range of sectors including tech, health care, R&D, retail, education, professional services and beyond.   As well as providing data protection services for our wider firm clients, the team provides standalone services such as DSR as a Service, DPIA support, training and an outsourced DPO service.

Main Responsibilities

• Support the delivery of Data Protection Officer Services and wider data protection support to the firm’s clients.
• Support the Data Protection Team in undertaking data protection audits of our client’s compliance processes against the requirements of UK GDPR and the Data Protection Act 2018.
• Analyse data protection risks and make practical recommendations to reduce and mitigate those risks.
• Undertake data protection impact assessments with a commercial mind set and provide practical recommendations.
• Draft privacy notices, cookie notices and data protection related policies.
• Research complex data protection issues as required by members of the team.  
• Assist clients in the processing of complex freedom of information requests, subject access requests and all other data subject requests within the prescribed timeframe.
• Provide support to Thorntons Risk and Compliance Team in achieving its internal data protection compliance objectives.

Knowledge, Skills & Experience

The post holder will possess the following knowledge, skills and experience:

• Proactive data protection compliance professional, capable of providing essential support to the Data Protection Compliance Team
• Detailed understanding of the requirements of UK General Data Protection Regulation and Data Protection Act 2018
• Degree in Law, Information Security or Risk Management or CIPP qualification and/or experience in a data protection or information security compliance role.
• Minimum of 3 years’ experience of working in data protection compliance.
• Experience of working in a regulated environment.
• Excellent problem solving skills – with the ability to pay close attention to detail.
• Ability to quickly absorb and interpret detailed regulation and relay key points in simple, plain language.
• Excellent people skills – confident engaging with clients.
• Experience in delivering training.
• Pragmatic approach with sound judgment and the ability to balance risk and a wide range of commercial considerations.
• Ability to work to tight deadlines and handle various projects simultaneously.
• Excellent time management and organisational skills.
• Team player
• Willingness to work to develop expert knowledge of data protection laws