At HelloFresh, we want to change the way people eat forever by offering our customers high-quality food & recipes for different meal occasions. Over the past 10 years, we've seen this mission spread around the world & beyond our wildest dreams. Now, we are a global food solutions group & the world's leading meal kit company, active in 18 countries across 3 continents. So, how did we do it? Our weekly boxes full of exciting recipes & fresh ingredients have blossomed into a community of customers looking for delicious, healthy, & sustainable options. The HelloFresh Group now includes our core brand, HelloFresh, as well as: Green Chef, EveryPlate, Chefs Plate, Factor_, & Youfoodz.

But most importantly, its our incredible people who make HelloFresh what it is. We thrive on giving our employees an inclusive working environment, in which they have access to development opportunities & in which their voices are heard & valued every day. This helps us best reflect & serve our customers.

About the role
As the Data Protection & Compliance Manager you will be part of the UK legal team & responsible for reviewing & implementing data protection policies, procedures & tools, conducting regular audits & assessments, providing training, tooling & guidance to staff, & liaising with internal & external stakeholders such as data subjects & the Information Commissioners Office (ICO). Responsibilities will include: 

• To draft, review, negotiate, & advise on commercial arrangements that impact on data protection.
• Contribute to the wider legal team, including sharing know-how & developing precedents.
• Monitoring compliance with the UK GDPR & other applicable data protection laws, as well as HelloFreshs internal data protection policies & standards.
• Advising & informing the company & its employees on their data protection obligations & best practices.
• Conducting data protection impact assessments (DPIAs) for high-risk processing activities & consulting with the ICO when necessary.
• Providing data protection training & awareness programs to staff at all levels of the organization.
• Assisting Customer Care in responding to data subject requests & complaints regarding their personal data.
• Keep up-to-date with changes in data protection & e-privacy law & practice in the UK & EMEA (including regulator guidance & enforcement activities, & key business trends & best practices), with particular focus on the evolving requirements of EU & UK GDPR. 
• Provide timely, accurate, quality legal advice on all aspects of data protection & e-privacy to businesses based in the UK & the wider EMEA region.
• Cooperating & communicating with the ICO & other relevant authorities on data protection matters.
• Maintaining records of the companys data processing activities & ensure their accuracy & completeness.
• Maintaining controls to prevent accidental or inappropriate sharing of sensitive data.

About you
Qualifications & Experience

• Extensive knowledge of UK Data Protection law including an understanding of marketing legislation (PECR)
• The ability to translate data protection law into everyday terms & actions
• An understanding of information security & its interdependency with data protection requirements
• Bachelors degree or equivalent in law, computer science, information security or proven experience as a data protection officer or a similar role in a complex organization.
• Ideally, a qualified UK lawyer but other common law jurisdictions or EU jurisdictions may be acceptable and/or a data protection/privacy qualification such as CIPP
• Experience in advising on compliance policies, intra-group & international data transfers, contractual data protection requirements, data breach incidents & DSARs is essential
• Experience of data governance design & implementation

Personal Attributes

• Audit experience: Having experience in conducting audits is beneficial for a DPO
• Organisational & communication skills: Should be able to organize tasks effectively & communicate clearly with different stakeholders
• Familiarity with data protection tools & technologies, such as encryption, anonymisation, pseudonymisation, etc.
• Ability to conduct audits, assessments, & investigations in a systematic & objective manner.
• Ability to provide clear & practical advice & guidance on data protection issues.
• Ability to design & deliver effective training & awareness programs on data protection

What you will get in return:

70% off HelloFresh or Green Chef boxes
Company pension scheme
Gym membership
Bupa private medical insurance (including dental & family cover options)
Electric vehicle scheme
Bippit account - financial support
Free professional development & coaching memberships
Mental health first aiders & an employee assistance programme
Dog friendly office! (London site only)
If in the office, enjoy a free breakfast every day
Eye care scheme
Cycle to work scheme
Group Life Assurance

Location: The HelloFresh Farm, 60 Worship Street, EC2A 2EZ, London / DC Site(s)

Work Schedule: Hybrid working - 50/50 remote working & flexible start/finish times (role
dependent)

Next steps: Your application will be reviewed & if successful, a member of the Talent Acquisition Team will be in touch within 2 weeks.

You are required to cooperate with HelloFresh in all health & safety matters. You are responsible for ensuring you take reasonable care of your own health, & safety as well as others who may be affected by the work activities you undertake. You must report incidents immediately & actively raise health & safety-related concerns to your Line Manager.

If you are currently a HelloFresh employee, please make sure you have discussed your application with your Line Manager.