Privacy Advisor in London

Job Description

What you will be focused on:  

• Overseeing privacy and data protection initiatives, collaborating with Legal to ensure compliance and providing risk-based advice with Privacy laws we are subject to.   
• Acting as a point of contact for privacy queries from the business; building strong relationships around the organisation. Working closely with different teams to implement products and services that comply with privacy laws and best practise.   
• Acting as the Privacy lead for new projects involving the use of personal data: with a focus on marketing, cookie compliance and ad tech.   
• Working closely with engineering teams to ensure products are built with privacy by design and default in mind.   
• Working closely with the Security Compliance and Assurance Team for supplier onboarding and assessment. Working closely with Application Security for incident management related to personal data.  
• Working closely with Legal and the Privacy Ops Analyst as an escalation point of contact for data subject requests from customers and employees.  
• Working closely with data governance team to ensure that privacy compliance activities are aligned: including RoPA completion and reviews of policy compliance at a system and domain level.  
• Drafting and forming new policies and processes for new activities involving personal data. 
• Drafting advisory notes and updates to senior management on regulatory trends, patterns and privacy priorities.         
• Working with the Privacy Ops Analyst to assess and document the privacy risk of business activities involving personal data using the Data Protection Impact Assessment and Legitimate Interest Assessment process.  
• Delivering bespoke privacy training to specific teams and designing awareness messaging: supporting the Privacy Ops Analyst in training and awareness raising.

Qualifications

• Specialist knowledge of key privacy legislation including General Data Protection Regulation (GDPR) and ePrivacy Directive: focused on marketing and cookies. Possesses the ability to look at wider regulatory trends understanding how these will relate to and impact Trainline strategic priorities.  
• You understand risk and best practise in privacy and are aware of enforcement trends and apply this knowledge when you give privacy advice.    
• Confidence owning and collaborating with wider business teams on new strategic projects that involve privacy.  
• Ability to advise in areas where there may be ambiguity: focusing on knowledge of market practise, regulatory guidance and judgement calls.  

Nice to have:

• IAPP certification: CIPP/E, or willingness to complete the CIPPE.   
• 2 years plus experience within a privacy function  
• Experience in a tech company  
• Experience advising on privacy initiatives involving ad tech and cookie compliance   

Additional Information

Why should you jump on board?  

We pay special attention to learning and development and organise quarterly company learning days as well as offering a learning budget that can be put towards resources of your choice.

We will cover the costs of your professional subscriptions and give you access to our very own learning platform. 

At Trainline, we care about the wellness of our employees.

We host puppy therapy sessions, in-office yoga and run Mental Health First Aider training courses as well as having an Employee Assistance Program as one of our many company benefits.  

We regularly throw fun social events such pub quizzes, karaoke nights and our large-scale Summer and Winter Festivals every year.

Additionally, we love hosting meetups in our amazing event spaces and having the opportunity to support internal and external community groups.  

We also hold companywide hackathons and our annual Trainline Tech Summit, which provides Trainliners with an opportunity to stand up and share their story, learnings, or new skills with their colleagues in a safe environment. 

Our flexi-first approach We believe in the importance of a healthy work-life balance and the value of a flexible workforce.

Our flexi-first approach outlines our commitment to a hybrid way of working and our expectations of Trainliners.

A key part of what makes Trainline special is our people and the value we get from the buzz and energy of our workplaces, and that’s why we’re proud to offer the best of both worlds.

In practice this means in–office attendance at least 40% of the time over a 12-week period for all Trainliners.

These in-office days are typically team led to help us connect, collaborate and create together.  

Our Values  

• Think Big  - We're building the future of rail 
• Own It  - We care about every customer, partner and journey 
• Do Good -  We make a positive impact 
• Travel Together  - We're one team 

Interested in finding out more about what it's like to work at Trainline?

Why not check out what our employees say about us on Glassdoor ?

You can also find out more information by following us on LinkedIn  or our 'Life at Trainline' Instagram  account.  

We value open expression at Trainline, we believe it’s the diversity of experience, backgrounds and perspectives of our employees that makes us who we are.

We encourage everybody to play a part in changing the way people travel across the world.