Risk Assurance and Data Protection Assistant

Flexible Hours Considered We are looking for a Risk Assurance and Data Protection Assistant to join our Compliance team and assist in relevant assurance activities to evaluate and report the extent to which the Group is managing areas of risk and control and ensure that the Development Bank of Wales continues to meet its obligations under UK GDPR / Data Protection Act 2018. This is a dual responsibility role with time split across the two working areas; Risk Management and Data Protection. As an advocate for risk management, you will plan and complete regular testing of internal controls and make changes to risk registers and risk scoring as a result, liaising with internal stakeholders to highlight issues and implement changes across the Group. You’ll work closely and collaboratively with the Risk Assurance Manager in developing a robust Controls Assurance Framework and Risk Management Framework, including policies, procedures, and guidance. With a meticulous approach to work, you will be accustomed to adhering to specific regulations and will support the development of new and existing policy documentation and related guidance notes in several areas, including; UK GDPR, PECR, Information Management and Security, Data Retention and Disposal. You’ll liaise with the Data Strategy Manager and assist in the production of Data Protection Impact Assessments (DPIA) and Legitimate Interest Assessments (LIA), making recommendations to the business and support with maintenance of data retention schedules. You’ll support with investigations into data breaches and will handle Data Subject Rights Requests. We’re looking for an individual with good knowledge and understanding of the benefits of a robust Risk Management Framework. You will feel at ease taking ownership of tasks and managing the workload to ensure timescales are met. With good interpersonal skills, you will be ability to communicate, in both writing and verbally, risk related content to those with no specialist risk knowledge. Additionally, you will have good organisational and planning skills, with the ability learn and assimilate the content and underlying rationale of existing risk management and data protection frameworks