Data Protection Officer

RAND is a not-for-profit research institute with over 30 years of experience in conducting policy research for governments, international organisations, research councils, charitable foundations, and other organisations. We believe that good research helps shape sound answers to pressing societal challenges, ultimately making communities safer and more secure, healthier and more prosperous in the future. RAND Europe has approximately 180 staff across offices in Cambridge, Brussels, and the Netherlands.

We wish to recruit a Data Protection Officer to work in our Cambridge office to act as the organisation’s expert on data protection and advise and support staff on ensuring that data processing is undertaken in compliance with relevant legislation.

This is an exciting opportunity working with one of the world’s most respected public policy research organisations.  It is ideally suited to a qualified Data Protection Officer who has an interest in the nuances of processing both primary and secondary data within a research-based organisation.

This role will be based at our Cambridge (UK) office; RAND Europe operates on a hybrid working policy with the opportunity to work from home for part of the week.

Key responsibilities:

• Provides advice and guidance to the organisation and its employees on the requirements of the GDPR, DPA and other relevant international data protection legislation
• Monitors the organisation’s compliance and briefs the Operations Director on areas of concern
• Provides advice and support to researchers when developing data protection aspects of proposals for new projects
• Provides advice and support to researchers when drafting data protection materials to support data collection
• Provides advice and support for those drafting Data Protection Impact Assessments
• Supports Legal team in reviewing data sharing agreements and data protection schedules for contracts
• Acts as point of contact for data subjects and for cooperating and consulting with relevant national supervisory authorities
• Leads on organisational training and awareness raising around data protection issues
• Creates and maintains centralised resources and templates for use in research projects
• Supports researchers in tailoring templates to meet data protection requirements for specific processing activities
• Provides guidance to RAND colleagues from other jurisdictions on the processing of data from European data subjects
• Keeps abreast of legislative changes, official guidance and case histories that may influence the organisation’s approach to data protection
• Liaises with internal research ethics group and other relevant bodies
• Supports organisational programme of continuous improvement
• Compliance with all company policies and RAND Europe Management Systems
• Ad hoc duties as required

• Expert knowledge of data protection law and practices
• Experience working in a research or professional services environment
• Ability to balance commercial and compliance considerations; assessing risks and offering compliant solutions
• Understanding and awareness of Information Security considerations
• Good communication skills and ability to collaborate
• Certified data protection qualification desirable

Salary

£45,000-£50,000 per annum DOE

• Pension - 8% Employer contribution;
• 33 days holiday allowance, including the Bank Holidays;
• Annual salary review;
• BUPA medical insurance;
• Generous company sick pay;
• Enhanced family friendly policies;
• Group income protection scheme;
• Group life assurance;
• Compassionate leave;
• Flexible working arrangements;
• Learning and development opportunities;
• Employee wellbeing training and support;
• Fresh fruit every day;
• Free on-site parking;
• Cycle to work scheme;
• Access to company bikes;
• Service awards.

How to Apply

If you believe you are suited to the above role, please submit an application comprising of a CV and covering letter. The closing date for applications is Sunday 17th November, however applications will be reviewed as received and interviews may be conducted before the closing date.

If you have not been contacted within 30 days of application deadline, please assume your application has not been successful.