GDPR & Data Protection Point of Contact.

Role Overview: 
Take ownership of day-to-day GDPR administration, acting as the primary point of contact for data protection matters. This includes managing and coordinating Subject Access Requests (SARs), Deletion Requests, maintaining the GDPR incident and request log
and assessing reported data protection concerns to determine the level of risk and appropriate escalation. 

Work closely with XpertDPO to ensure compliance with GDPR and data protection legislation, seeking advice where required while exercising sound judgement in the management of routine and complex matters. Ensure all requests, incidents and compliance activities are handled accurately, within statutory timeframes and in accordance with company policies and regulatory requirements. 

You will also be responsible for producing accurate monthly and quarterly GDPR reports and management information for the Senior Leadership Team and Board, providing insights into compliance performance, data subject requests, incidents, trends, and key risks to support informed decision-making. 

This represents an opportunity to broaden your skill set beyond operational responsibilities, developing specialist knowledge in compliance, risk management and data protection while becoming a trusted advisor to the business on GDPR matters.

Training & Continuous Improvement 

• Support the delivery of GDPR awareness initiatives and compliance campaigns. 

• Assist in developing guidance materials and internal communications. 

• Keep up to date with developments in UK and EU data protection legislation and regulatory guidance. 

• Recommend improvements to policies, procedures, and operational practices. 

Key Skills: 

• Excellent communication and stakeholder management skills. 

• Ability to exercise sound judgement when assessing data protection risks and determining appropriate actions. 

• Highly organised with strong attention to detail and the ability to manage confidential information with discretion. 

• Strong problem-solving skills, with the ability to investigate issues, gather relevant information, and recommend practical, risk-based solutions. 

• Ability to work independently while collaborating effectively with XpertDPO and internal stakeholders. 

• Experience handling confidential and sensitive information with discretion. 

• A proactive and continuous improvement mindset, with the ability to identify opportunities to enhance GDPR processes, improve compliance controls, and support the development of best practices. 

• Demonstrate an interest in the areas of compliance  

• Ability to remain calm and make informed decisions when managing sensitive, complex, or time-critical data protection matters. 

• Additional Info: 
  Role commences
  immediately to cover maternity leave 
• As this opportunity is open to employees across all Medserv locations, remuneration will be discussed with the successful candidate