Data Privacy Advisor

You will be part of the Crick's Legal and Governance team. We are a full-service function responsible for legal, contractual, regulatory, data protection and company secretarial matters. We provide commercial legal advice and transactional support for all parts of the Crick. We oversee data privacy compliance jointly with the Information Technology team. We also provide a full secretariat service to the boards and committees of the Crick and its subsidiaries. This is a busy role in a friendly team where collegiality, professionalism and attention to detail are key. Working closely with senior colleagues, you will manage and maintain a programme for compliance with regulation and help to embed a culture of learning and improved ways of working. You will also help deliver the Legal and Governance team's strategy, working closely with team members and stakeholders to establish best practice and new ways of working. Key Responsibilities These are the key areas. You may be asked to undertake other relevant tasks in line with organisational requirements: Governance:

• Lead on the delivery of the Crick's data protection compliance roadmap, maintain the Crick's privacy framework, update processes, monitor compliance.
• With the Deputy Chief Information Security Officer, co-chair the Data Privacy, Architecture and Cybersecurity meetings, and work with key stakeholders to ensure continued embedding of data privacy considerations and increased expertise.
• Maintain data privacy policies, processes and procedures in line with applicable legislation and the Crick's needs.
As a subject-matter expert:
• Be the key contact for data protection enquiries from across the Crick.
• Provide advice and expertise on data privacy (eg DPA 2018, UK GDPR, PECR, FOI requests, privacy by design and by default, DPIAs, data incident investigation, DSAR management).
• Handle complex cases and review/draft/advise on privacy provisions across a wide range of operational and research contracts.