Data Protection Officer

Job Introduction

About the role:

Provide data privacy related advice and to manage the overall compliance of GDPR across SCS JV. Ensure all the relevant safeguards are in place to protect personal data against unauthorised or unlawful processing, accidental loss, destruction and damage. Identify privacy related issues, raise awareness and ensure compliance with relevant legislation. Oversee the data protection impact assessments (DPIAs) and monitor performance against these.

Flexible working: We welcome you to ask about the flexibility you need. This might be part-time, remote working, or compressed hours for example. Anyone who applies for a role can ask about flexibility at interview. In return, we will explore what is possible for the role.

Role Responsibility

• Monitoring developments in relevant law, regulation, policy and market practice and amend / support amending of existing policies, plans and procedures, or drafting new ones;
• Supporting the wide project team in ensuring the SCS JV's compliance with GDPR, Data Protection Act 2018 and other applicable data protection laws and regulations;
• Handling queries from the SCS JV and from external parties, and ensuring ongoing compliance in respect of GDPR compliance;
• Working closely with Information Security and Cybersecurity, Legal, People and Stakeholder Interfaces Teams in ensuring data protection compliance within SCS JV;
• Manage any privacy breaches, working to identify root causes, mitigate risks and prevent reoccurrence;
• Maintain a record of, and monitor for compliance, data processing activities undertaken across the organization;
• Provide ad hoc advice and assistance as required to SCS JV across all Teams;
• Ensure that audits related to data protection compliance are included in the project’s audit programme and suitably conducted;
• Understand the Client and SCS JV Policies, Processes and statutory requirements as they affect the project’s operations and ensure that the requirements, as applicable within each discipline, are implemented on the project.

The Ideal Candidate

• Data Protection qualification.
• Ideally also a qualified lawyer;
• Proven DPO experience or experience in a business environment;
• Strong risk management expertise;
• Detailed knowledge of privacy related legislation and GDPR;
• Influence and guide a wide range of stakeholders to ensure that the business protects the best interests of clients and manages privacy related risk;
• Strong communication/verbal, influencing skills, and the ability to liaise with the most senior levels of the organization.

About the Company

The role will work on the HS2 project. HS2 is the UK’s new high speed rail network. It will be a catalyst for economic growth across Britain, freeing up space on the existing railways and connecting 8 out of the UK’s 10 biggest cities with fast, reliable and frequent high speed services

The Skanska | Costain | STRABAG (SCS JV) is delivering the HS2 London Tunnels Contract. Scope of works includes twin-bored tunnels (TBM), SCL tunnels, shaft sinking, bridge demolition and reconstruction, services diversions, earthworks and the construction of site compounds.

You’ll be a welcomed member of the wider team, with opportunities to take on additional responsibility, join one of our networks for women, military or LGBT+ staff, and participate in cultural and social events with the local community (e.g. as a STEM ambassador).

Your personal and professional development is important to us. We welcome a discussion about how we can support you with further study, or professional membership or attainment for example.

HS2 – working with Skanska, Costain and STRABAG, closely monitors job applications, to ensure an inclusive recruitment process. To ensure we are able to maintain this, and to recruit a diverse workforce, we require candidates to complete the diversity form as part of their application so we are able to monitor and improve our approach to diversity.  Please note, all responses are anonymous and we will not share any of your data with other parties. All data will be held securely, (as stated within the Data Protection Act 1998) and will be reported to HS2.

It is an SCSJV requirement that all employees, Design House,  and Supply Chains must implement and comply with the requirements of ISO 9001:2015 Quality Management System, ISO 14001:2015 Environmental Management System with guidance for use”, OHSAS 18001:2017  Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 Information Security Management System, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture ‘s operations and ensure that the requirements, as applicable within their discipline, are effectively implemented on the project. Develop a culture of safety on the project through the absolute commitment to the Zero Accidents target and ethos, and develops a wider awareness of quality, environmental issues and demonstrates commitment to achieve continual improvement and Zero tolerance.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

SCS Railways