Data Privacy Specialist

At M&G our purpose is to help people manage and grow their savings and investments, responsibly. As a business, we are continuing to take steps towards a sustainable future, delivering better long-term solutions for our customers and clients and identifying new opportunities to make a positive impact for our environment and communities. To help us achieve our vision we’re looking for exceptional people who live our values of care and integrity and who can inspire others; embrace change; deliver results and keep it simple.

We will consider flexible working arrangements for any of our roles and also offer work place accommodations to ensure you have what you need to effectively deliver in your role.

The Role:
The Data Privacy Specialist is an integral part of the local IT & Data Privacy Governance Team, supporting the delivery of the data privacy governance and oversight services for the Management Company and its European branches and subsidiaries. The core purpose of the role is to assist M&G in meeting its requirements under data protection and privacy legislation and enabling the IT Conducting Officer and the Group’s Chief Data Protection Officer (CDPO) to perform their general and regulatory responsibilities in regard to data privacy.

Key Responsibilities:
The key responsibilities of this role are to support the delivery of the Data Privacy governance and oversight objectives to co-ordinate and maintain the effectiveness of privacy risk management processes and provide consolidated risk analysis and risk management information for Senior Management as required. This involves:

- Initiatives to improve privacy risk data quality and to aid collation and analysis of a range of privacy risk information (including RCSAs, KRIs, Events/Breaches etc.), consolidating and developing this information into suitable reporting formats for Risk Committees and Governance Forums.
- Keep abreast of industry trends, regulatory and business issues impacting self-certification.
- Informing DPO function about new regulation & laws, and ensure these are being included in the Data Privacy and protection policies and standards
- Assist with development of privacy risk controls and guidelines, and the subsequent process of communication with the business.
- To demonstrate a positive risk, compliance and control culture through the identification, assessment, monitoring and management of risks and issues ensuring timely resolution of control weaknesses.
- Support internal and external audits to help ensure they are effectively communicated, and subsequent remedial activities are followed through to agreed actions.
- Ensure local data privacy registration and fees are maintained
- Completion of Annual Statement of Compliance (ASoC) in collaboration with Risk
- Completion of local privacy related MI/Reporting/Risk Papers
- Ensure personal data breaches are identified, managed and escalated
- Ensure Data Protection Impact Assessments (DPIAs) are identified, completed and maintained
- Ensure that Records of Processing Activities (RoPAs) are maintained annually by the functional areas
- Ensure Data Privacy Notices (DPNs) are reviewed and maintained
- Ensure training is conducted to the level required of LUX and European branches/subsidiary employees

Key Knowledge, Skills & Experience
- 3 years or more experience in financial services industry, preferably with some prior experience in Data Privacy, IT Risk/Operational Risk/Risk Management/Internal Audit.
- Demonstrates professional knowledge of the EU data privacy and retention laws and regulation, IT Risk and IT outsourcing responsibilities (according to EU data privacy laws and Luxembourg Circulars 18/698, 22/806, etc.)
- Very experienced in developing and documenting policies, procedures and in compiling reports
- Experience of dealing with Data Subject Access Requests, documenting and reviewing RoPAs, DPIAs, etc.
- Practical knowledge of business risk and control frameworks and how these map to evolving regulatory requirements.
- Good reporting skills to build, publish and maintain reports and dashboards.
- Practical knowledge of handling breaches and risk events.
- Practical knowledge of project management concepts and how to use these to complete and deliver tasks.

Job & Personal Skills:

- Excellent written and oral communication skills
- Ability to conceptualise complex issues
- Ability to manage and deliver change
- Ability to proactively identify & drive through improvements
- Be proactive, decisive, demonstrate well considered judgements and anticipate emerging risks
- Must have competent Excel, PowerPoint and MS Word skills.
- Good analytical skills in order to identify key themes, suggest solutions and deliver on opportunities.
- Good stakeholder management skills, with the ability to successfully navigate a complex organisation as well as build strong relationships and work collaboratively with teams across the business.
- Ability to operate remotely, in a diverse