Head of Data Protection - 12 month FTC

The Head of Data Protection is a critical role for the Telegraph. As a senior member of the Group Legal team, reporting into the General Counsel and DPO, this role requires a robust understanding of data protection laws and their commercial application.

The successful candidate will be the Telegraph's subject matter expert on data protection, providing legal and compliance advice, guidance and support across the organisation on complex data protection and wider consumer matters. Managing a small team and working independently but with regular updates to the DPO to ensure they are abreast of all high level projects and strategy proposals, the DPO will rely on the Head of Data Protection to not only implement the Data Protection Framework in accordance with its standards, but identify areas of improvement and use their initiative to constantly enhance TMG's practices.

This an exciting and evolving role, responding not only to a fast-changing regulatory environment but to new and innovative projects and strategies presented by the business. It provides exposure to exec level stakeholders, and opportunities to shape the data strategy for the Telegraph whilst engaging and demonstrating real technical ability in complex areas of law and regulation.,

• Manage and oversee the work of the team's Data Protection Manager and Compliance Manager to best achieve the business' goals


• Provide expert advice to the Group Legal commercial lawyers on complex contractual data protection matters and develop precedents and best practice templates for their use


• Supervising more junior members of the team on data protection matters in contracts


• Provide advice and regulatory guidance on the AdTech environment, including the use of cookies and new technologies


• Provide clear, commercial and timely advice to marketing and subscription teams to enable the compliant collection and use of customer data


• Work closely with key stakeholders on Generative AI projects, developing governance in this evolving area and advising on related data protection and wider AI risk


• Keep abreast of industry trends; changes in data compliance and consumer regulation and new regulatory guidance. To communicate to and manage this with relevant senior stakeholders and oversee changes in process to ensure the Telegraph meets necessary requirements


• Encourage and build engagement between the business and the data privacy team



• Triage privacy enquiries and identify where there is a requirement for:



• Data Protection Impact Assessments


• Legitimate Interests Assessments


• Updating Records of Processing Activities


• Transfer Risk Assessments



• Assist the business in the completion of, and maintaining records of, the above


• Ensure that the rights of individuals are managed in accordance with data protection laws, and oversee the fulfilment of data subject's rights such as subject access requests


• Provide advice and prepare guidance and awareness as needed to support a culture of treating data as an asset which must be used within an appropriate framework


• To have oversight of TMG's mandatory data protection e-learning (and any other) training, and bespoke training as required


• To ensure and oversee that data protection compliance is managed in line with the Telegraph's data protection standards, controls and processes that form the TMG data protection framework


• To work closely with the DPO, other stakeholders and relevant regulators (as appropriate) to effectively deal with data breaches/incidents


• To coordinate and oversee management reporting in respect of data protection compliance
  
  Proven track record of providing expert privacy advice and implementing/managing an entity's data privacy framework


• A data protection professional or a qualified lawyer with substantial data protection experience


• Expert knowledge of EU and UK data protection laws e.g. GDPR; UK GDPR; Privacy and Electronic Communications Regulations. Awareness and good understanding of emerging laws e.g. Data Protection and Digital Information Bill


• Experience as the subject matter expert for data protection across all functions in an established business (e.g. subscriptions; marketing; adtech; HR; customer care; finance etc.)


• Working with minimal guidance in an extremely fast moving and dynamic environment with constantly changing demands


• Ability to implement a "privacy by design" approach to data protection, and understand, interpret and map out complex dataflows and structures for business colleagues understanding


• Commercial awareness and ability to apply sound commercial judgement, Good knowledge of wider consumer and advertising regulation and its application


• Experience in digital news, media, publishing, subscription or e-commerce industries


• Relevant data protection professional qualifications (e.g. CIPP/E; CIPM; AIGP etc.)


• Good working knowledge of data privacy laws in other jurisdictions (e.g. the US; Europe)
  
  The nature of our industry means life at the Telegraph Media Group is fast-paced, demanding, and interesting. We also want it to be rewarding for everyone who works here by creating a suite of benefits that contribute to lifestyle choices and leisure activities. From dynamic working opportunities, medical cover, and parental leave (six months fully paid maternity leave and enhanced paternity/partner leave), to life assurance and season ticket loans, you can choose from a range of flexible benefits, designed to support your lifestyle and help you achieve a healthy work-life balance.


Training and development

With support from your manager and colleagues, you'll also have access to a variety of training and development opportunities through The Academy. Covering a range of personal and professional skills, our courses enable you to develop an enjoyable and rewarding career.

Our commitment to inclusion

At Telegraph Media Group, we foster a diverse and inclusive workplace and we are committed to building a team that reflects a wide variety of skills, perspectives and backgrounds. We believe in equality of opportunity and welcome candidates from all backgrounds, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion and/or belief.