Lead - Data Privacy Assurance

As part of the Group Privacy Team, I support the business to assess its data privacy compliance position by working with the Data Privacy Assurance Executives in my team to test, validate and report on a range of data privacy controls.

Required Experience :

• Risks, controls and assurance experience (Mandatory)

• Team & people management
• Workload allocation and management
• Stakeholder engagement experience

3+ years experience on Assurance/controls testing preferred

• Basic understanding of data privacy principles preferred
• Experience building credible and trusting relationships preferred
• A good understanding of how Tesco Group operates preferred

First Line supervisory to Data Privacy Executives as they test (across the group) a range of data privacy controls. These controls have been established to ensure our business is operating in compliance with privacy laws (mainly GDPR). It is vital therefore Tesco's senior management understands whether the controls are in place and effective, or not.

• The Team will regularly test and report on our 3 pillars of controls: Blueprint Controls, Operational Controls and Data Standards.
• Training the Executives to validate and challenge testing evidence submitted by stakeholders. Escalating where needed.
• Overseeing stakeholders and building their engagement with the privacy assurance process.
• Working with stakeholders to develop and implement remediation plans where testing reveals ineffective controls.
• Owning privacy assurance "deep dives" - targeting specific business units or functional areas for more thorough review of their privacy practices.
• Producing MI/reporting dashboards and governance papers to show the status of the control testing environment.
• Liaising with Group Audit to ensure consistency of approach between the 2nd and 3rd line functions.
• Having a transformation approach to further simplify and automate our data privacy controls and testing methods.
• Over time the assurance will expand from purely data privacy testing to other compliance areas.
• Represent Talent Acquisition in all forums/ seminars pertaining to process, compliance and audit
• Perform other miscellaneous duties as required by management
• Driving CI culture, implementing CI projects and innovation for withing the team