Data Protection Analyst

About the Role: Data Protection Analyst

The Data Protection team at Harrods is seeking an enthusiastic Data Protection Analyst to contribute to innovative data protection workstreams. This role is both exciting and demanding, requiring strong communication and interpersonal skills in addition to technical knowledge. The Data Protection Analyst will provide essential support to the Data Protection team, handling day-to-day data protection matters, projects, training, and various initiatives.

You will advise Harrods staff on the compliant use of personal data and technologies involved in personal data processing. This includes supporting the management of Data Processing Registers and the Data Protection Accountability Framework. A key aspect of the role involves assisting with data protection education and awareness campaigns, which includes publishing frequent company-wide communications, engaging with members of the Data Protection Accountability Network, and delivering tailored training events and initiatives to colleagues across all business areas.

• Maintaining comprehensive reports of data protection related complaints, incidents, breaches, and actions taken, monitoring records for trends.
• Collaborating with relevant business teams to investigate data protection complaints and draft appropriate responses.
• Supporting the Customer Operations and Employee Relations teams with data subject requests.
• Managing Data Protection Impact Assessments (DPIAs), identifying when they are required and driving their completion.
• Proactively monitoring and staying informed about current and upcoming data protection and information security news, case law, legislative changes, and updates to ICO guidance.

About You

As a Data Protection Analyst, you will be an effective problem solver with the ability to communicate clearly and confidently. You should have experience in effective stakeholder management and possess excellent working knowledge of Data Protection.

• Previous experience working in Data Protection is required.
• Ideally hold an IAPP CIPP Certification, CIPT Qualification, BCS Certification in Data Protection (foundation or practitioner level), or an information security or cyber security certification/qualification.
• Ideally have experience using privacy management systems, such as SureCloud.
• Excellent working knowledge and proficiency with Microsoft Outlook, Word, Excel, PowerPoint, Project, Visio, and SharePoint are essential.

Please note, your application may still be considered even if you do not have all the desired experience listed above.

About Us

Harrods is one of the world’s leading luxury department stores, recognized as a destination for top designers and the most sought-after brands globally. Our shared mission is to make visiting our iconic Knightsbridge store one of the world’s most inspiring shopping experiences.

Our Promise to You

Help us achieve the impossible for our customers, and we will do something remarkable for you. Beyond a friendly environment that inspires your best work, we offer abundant opportunities and support to build an exceptional career across our business’s diverse specialisms.

Uniquely You

While our job adverts outline ideal qualities, skills, and prior experience, we believe in the potential for growth and value individual strengths. If you can demonstrate the majority of skills and strong experience to thrive in this role, we encourage you to apply. At Harrods, we believe the personality and authenticity of our people set us apart. We celebrate and invite applications from all cultures, backgrounds, tastes, and experiences, and are proud of our culture where people from all walks of life can grow and thrive. What makes you unique makes us exceptional. If you want to know more about life at Harrods, search #TogetherHarrods on LinkedIn, or follow us on Instagram @togetherharrods.

Key skills/competency

• Data Privacy
• GDPR Compliance
• Risk Management
• DPIA (Data Protection Impact Assessment)
• DSAR (Data Subject Access Request)
• Training & Awareness
• Stakeholder Management
• Information Security
• Incident Response
• Policy Development