Compliance Officer - Chorley, United Kingdom - Speed Medical

Speed Medical

Verified Company

Chorley, United Kingdom

3 weeks ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

The Role

Key role requirements

As a data protection officer you will oversee and implement data protection strategies in line with GDPR including:
Monitoring compliance with the GDPR and other data protection laws, the data protection policies, training and awareness, training, and audits
Advice the business on their data protection obligations
Provide advice on Data Privacy Impact Assessments to the appropriate business areas
Be a contact point for the ICO and cooperate with them, including during prior consultations (Article 36), consult with them on any relevant matters
Have due regard to the risks associated with processing operations, and take into account the nature, scope, context and purposes of processing
Educate the company and employees on important compliance requirements
Conduct security audits both internally and externally as and when required
Develop, maintain and revise policies and ensure they are implemented across the company
Responsible for the ISO27001 certification which includes: Facilitating the Information Security Committee meetings quarterly including producing the minutes of the meetings and overseeing recommended actions are completed
Preparing evidence for the annual ISO certification audits (surveillance or recertification) and being the point of contact for the auditors
Responsible for overseeing and providing evidence for Annex A controls specifically relating to
Policies, Internal Organisation, HR, Asset Management, Physical & Environmental controls, Incident Management, BCP and Compliance
Responsible for the ISO9001 certification which includes:
Facilitating the Management meeting annually
Preparing evidence for the annual ISO certification audits (surveillance or recertification) and being the point of contact for the auditors
Data security compliance in line with GDPR
Identify potential areas of compliance vulnerability and risk and develop corrective action plans
Keep up to date with, and understand any changes to laws and regulations