Privacy and Protection

Experience working within information security and privacy and broader risk management.

• Experience of assessing key documents such as frameworks, policies and procedures.
• Understanding and working knowledge of Privacy, Data Protection and Information Security principles and protocols.
• Flexible and responsive with a proactive approach to problem solving.
• Able to inspire, influence and enthuse others.
• Thorough and detailed approach to assessing records.

Support the Head of Information Security & Privacy in the delivery and maintenance of the Bank's information security and privacy activities.

• Operate within the terms of the applicable decision-making frameworks and RACI models to ensure that the Bank can provide the required level of evidence to the UK regulators regarding independence and risk management activities.
• Partnering with the First and Second line of defence Controls, Risk and Compliance functions to monitor and review output including UK ROPA, DPIA and LIAs, DSRs, data breach management.?
• Ensure that privacy and security risks are identified and managed through the specified channels.
• Support the drafting, assessing and implementation of policies, guidance and process relating to information security and privacy.
• Review internal monitoring of the Bank's compliance against information security, privacy and related compliance areas in line with identified key performance indicators and measures.
• Administer the Bank's Internal information security and privacy Forum, liaising with attendees on agenda items, preparing papers, attending and minuting meetings.
• Support projects and/or initiatives which entail UK information security or privacy requirements.?
• Contribute to and assist in the delivery of the information security and privacy training and awareness programmes.
• Promote a culture of choice, control, transparency and proportionate security in handling personal data by working with and influencing internal and external stakeholders
• Support the Head of in the provision of advice on compliance, regulatory and risk management issues relating to privacy and information security matters.