PAY GRADE: RCS J

Contract Type: Permanent (Full-Time)
Location: Remote - but will require travel to sites in the Midlands and North of the UK
DHL, an award-winning, leading supply chain business is seeking a Data Privacy Manager to join our IT team. You’ll be accountable for supporting the DPO and work as part of the UK&I Data Protection Team in all data protection compliance requirements, relating to the region.
IT is the nerve system of Supply Chain – we connect different parts of our organisation with each other and to customers, translating business needs into solutions across the globe. Our IT professionals play a vital role as strategic partners, capable of enacting value-adding change through standardisation, differentiation and innovation.

• Ensuring DHL deliver on our regulatory obligations to safeguard employee and customer personal data assets, in line with the UK Data Protection Act (2018), ROI Data Protection Act (2018), General Data Protection Act (GDPR) (2018), Privacy and Electronic Communication Regulations (PECR) (2003), UK AI Act (2024) and other evolving UKI laws which impact compliance requirements.
• Ensuring compliance with Deutsche Post DHL Group personal data processing corporate guidelines and industry best practice.
• Responsible for the planning and delivery of processes, procedures, training and guidance developed with the DPO and wider UKI Data Protection Team, to underpin our Data Protection Management System, as well as supporting the delivery of strategic business projects and initiatives.
• Act as a subject matter expert, supporting the DPO, Data Protection Team and the business in delivering against strategic, tactical and BAU initiatives, with a focus on safeguarding organisational, colleague and customer data assets, whilst managing and mitigating risk, in line with legal requirements and contractual arrangements.
• Provide coordination with country regulators on behalf of DHL, including analysis of communication of and implementation of guidance.
• Implementing and refining data protection controls, processes, and standards. Including supporting Data Protection Champions to ensure that they effectively deliver localised support to their allocated business units.
• Managing Data Privacy Impact Assessments with stakeholders to identify high risk areas.
• Manage the generation of adequate, suitable, and accurate records to meet requirements of legislation. Report on compliance the DPO.
• Leading data protection audits including due diligence and audit of third-party providers; managing the audit schedule, audit structure and audit reporting.
• Support region with handling and protection of employee & customer personal data and respond to questions and queries within UK&I regarding data protection.
• Deliver training on Data protection to business unit training teams to facilitate cascade of Data Protection information.
• Resolving actual/potential data protection issues for customers.
• Support the handling, investigation and resolution of data breaches and incidents.
• Supporting the handling of Data Access Subject Requests relating to personal data.