Privacy Solution Specialist

Why this job matters

The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in both our on-prem and Google Cloud Platform (GCP) estates. As part of this ambition, it is key to deliver safely, protecting the data at every stage. The data in GCP will be a huge and valuable asset to BT and in response BT must deploy key processes, measurements and capabilities to protect this data. This role is required to ensure privacy is considered by design and through the live cycle using Privacy Enabling Technology and other defence mechanisms to protect data on prem and in GCP.

What you’ll be doing

•    Responsible for ensuring platform’s adherance to privacy legislation in line with our security policies. 
•    Responsible for understanding how our services & capabilities in the domain are going to evolve to ensure we keep pace with emerging legislative, technical & organisational changes. 
•    Privacy by Design - Accountable for assuring designs are compliant. Will ensure that designs meet mandated policy & legal obligations.
•    Work through the resolution within time and resource constraints within this area and has e2e responsibility of for ensuring due diligence is applied. 
•    This role will be expected to identify new opportunities to reduce risk exposure eg by proposing new technical & operational capabilities
•    The activities of the role may change according to the demand pipeline and the priorities of the business.

Key decisions

• This role would assess the relative compliance with privacy & security rules.
• Identify the root cause and then decide on how to resolve the customer affecting issues in the domain. 
• Understand the business benefit and challenge in order to determine which solutions to include in the releases in the domain.

Skills required for the job

•    Story-telling : strong skills in building the case for compliance & risk management, and communicating this to business & technical audiences
•    Stakeholder Management : Develop close relationships with customers, vendors, suppliers and BT employees at a senior level, confidently present information and facilitate positive business outcomes. 
•    Problem Solving : Ability to problem solve for issues that may span multiple domains & customers 
•    Change Management : Adapt and change team processes and technical practices in a dynamic and challenging environment in order to improve quality and business value.
•    Privacy Rules & Security Polices : will apply deep understanding of the policies & rules to drive appropriate solutions including anonymisation and pseudonymisation and other privacy preserving techniques
•    Business acumen: Knowledgeable in business strategy and the drivers of risk mitigation
•    Commercial & Risk Awareness: Able to understand & evaluate both obvious and subtle privacy & security risks, especially in relation to a programme. Able to determine the appropriate action in highly political and complex situations and ensure that appropriate action is taken.
 

Experience you would be expected to have

•    Extensive experience of the application of technical & organisational/operational controls which are necessary to ensure compliance with policies & legislation. (MANDATORY)
•    Fully conversant with GDPR legislation and able to interpret how it impacts BT. Is able to set out specific requirements and guide/assure design activities. (MANDATORY)
•    Competent & articulate communicator who can effectively engage with stakeholder (customers, colleagues in Technology, Security, Dynamic IT, DPO etc) (MANDATORY)
•    Ability to understand potential new solutions which simplify the compliance process, inform our capability roadmap and reduce our exposure to risks (PREFERRED)
•    Cloud Certified: Experience of working in Cloud Environments. The preference is that a Cloud Security Certification will be held.
•    Likely to be certified (or pursuing accreditation) in recognised Data privacy training.
 

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.