Job details

Data Protection and Risk Analyst

About CEF:

CEF is a global electrical wholesaler, providing electrical products to people in the industry known for its extensive range of products and commitment to customer service. Founded in 1951 in the United Kingdom, it has since expanded to over 1,000 locations across multiple countries, including the United States, Canada, Australia, and Europe.

We in IT are delivering value to our business and our customers with the innovative solutions that enable our business to better serve our customers today and in the future. We recognise that technology and data are at the forefront of this.

Our Global IT team deliver a portfolio of transformative work, expand our digital options, upgrade and future-proof our systems to place us at the forefront of the marketplace.

To do this, we need talented and creative people across all areas to join us in delivering our evolution to enable our forward-thinking business over the next few years and beyond, and this is where you come in...

Life as a Data Protection and Risk Analyst at CEF:

As a Data Protection Risk Analyst at CEF, you will play a crucial role in supporting the business's compliance and risk management efforts. Working within the Information Security Team, you’ll collaborate closely with our Data Protection Officer and Governance and Compliance Manager to ensure the organisation remains compliant with data protection regulations and mitigates risks effectively.

Your contributions will be vital in alleviating workload pressures, streamlining processes, and enhancing our Information Security posture.

This role is ideal for someone who is detail-oriented, proactive, and eager to develop expertise in both data protection and risk management within a dynamic, collaborative team. You'll also be part of ongoing projects to ensure CEF maintains compliance with various information security frameworks such as ISO 27001, PCI DSS, and Cyber Essentials.

Your Objectives:

In this role, you’ll split your time between supporting data protection and risk management efforts:
Data Protection Objectives (50%)
Manage Subject Access Requests (SARs) and Right to be Forgotten requests.
Handle compliance-related inquiries, such as police requests for CCTV footage and legal data inquiries.
Support the screening and completion of Data Protection Impact Assessments (DPIAs).
Provide administrative support to ensure CEF complies with Data Protection legislation.
Risk Management Objectives (50%)
Assist with maintaining and updating the EMEA Information Security Risk Register.
Support PCI renewal and Cyber Essentials recertification processes.
Help manage phishing simulations, KPI reporting, and information and security risk remediation efforts.
Maintain and develop the AI risk catalogue and contribute to achieving security standard certifications.
Liaise with multiple IT teams to monitor and address cybersecurity risks.
Assist with customer security questionnaires and responses to support compliance efforts.
Draft regular security communications to raise awareness of information security best practices.

Essential Skills & Experience:

Experience handling Subject Access Requests (SARs) and Right to be Forgotten requests.
Familiarity with GDPR compliance requirements and related legislation.
Understanding of risk management processes, including maintaining risk registers and conducting risk assessments.
Strong communication skills and the ability to engage professionally with stakeholders across the business.
Understanding of cybersecurity frameworks such as ISO 27001, PCI DSS, and Cyber Essentials.
Ability to work independently and manage sensitive data with discretion and confidentiality.

Beneficial Skills and Experience:

Knowledge of the NIST Security Framework.
Experience supporting audits and compliance efforts for ISO 27001, ISO 42001, and PCI DSS.
Recognised certifications related to information security, risk management or data protection.

Location:

Whilst this role is predominantly home based, you must be willing to travel to Durham and other UK sites as and when required.

Interview Process:

Call with Talent Acquisition
Microsoft Teams Video Call with Data Protection Officer and Governance, Risk and Compliance Manager
Microsoft Teams Video Call with Head of Information Security (EMEA) and Head of Information Security (North America)

Package:

Competitive basic salary
Annual IT Bonus scheme
MySavings - Employee Discount Platform
Pension: 3% ee’e / 3% e’er (Total 6%)
Champion Health – a comprehensive physical, mental & financial wellbeing platform, offering bespoke content on all aspects of wellbeing & life including recipes, workouts, blogs and loads of other content for you
Free use of the state-of-the-art private gym at our award winning IT Headquarters

Average salary estimate

$60000 / YEARLY (est.)

min

max

$50000K

$70000K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Data Protection and Risk Analyst, City IT

If you're passionate about data protection and risk management, CEF is the perfect place for you to thrive as a Data Protection and Risk Analyst! CEF, a leader in global electrical wholesaling, embodies a culture driven by innovation and a strong commitment to customer service. You’ll be joining our IT team remotely while having the opportunity to contribute significantly to our compliance and risk management initiatives. In this key role, you’ll collaborate with our Data Protection Officer and Governance and Compliance Manager to ensure we’re on top of evolving data protection regulations. Your day-to-day will involve managing Subject Access Requests and providing administrative support for compliance, alongside assisting with maintaining our Information Security Risk Register. If you're detail-oriented, proactive, and eager to dive deep into the realms of data protection and risk management, CEF opens doors to dynamic projects like ensuring compliance with ISO 27001 and PCI DSS. Joining us means being part of a collaborative team focused on enhancing our information security posture, as well as having the chance to grow your expertise in a supportive environment. So, if you’re ready to make a big impact with your skills while working from the comfort of your home, CEF is the place to be!

Frequently Asked Questions (FAQs) for Data Protection and Risk Analyst Role at City IT

What are the responsibilities of a Data Protection and Risk Analyst at CEF?

As a Data Protection and Risk Analyst at CEF, you will be responsible for managing Subject Access Requests (SARs), handling legal data inquiries, and supporting Data Protection Impact Assessments (DPIAs). You’ll also help maintain the EMEA Information Security Risk Register, assist in PCI renewal processes, and participate in mitigating cybersecurity risks. This multifaceted role plays a critical part in safeguarding data compliance while enhancing our organization’s security framework.