Data Protection Higher Apprenticeship

Job Purpose

To support the Data Protection Officer and Legal Team in delivering data protection and privacy compliance activities across Mobilize Financial Services. The role will provide practical experience and structured learning in data protection, privacy, regulatory compliance and risk management within a financial services environment to provide support to stakeholders in a timely and commercial manner to support business projects and maintain data protection compliance. The apprentice will work closely with stakeholders across the business whilst studying towards a recognised data protection qualification.

The role will include providing data protection advice, horizon scanning for future data protection developments and risk-management. As a Data Protection Apprentice, you will play a pivotal role in ensuring the company’s compliance with data protection laws across the UK, in the context of automotive finance and banking operations. You will collaborate with cross-functional teams to embed data protection into business processes and product development while developing knowledge and practical experience of data protection law and regulatory requirements.

Detailed Description

A key focus for the role will be to support our Departments in all aspects relating to Data Protection. This is a broad role which will involve managing key stakeholder relationships across the business. You should be proactive, solutions-driven and enjoy working in a fast paced and entrepreneurial environment.

• Data Protection Advice: Assist with researching and preparing data protection guidance and provide clear, practical legal and data protection guidance to support new projects, products, and services, ensuring compliance with UK and EU laws.
• Contract Management: Support contract reviews and maintain records of data protection assessments, review, draft, and negotiate contracts with suppliers and partners from a data protection to ensure compliance with internal processes and legal obligations.
• Compliance Monitoring: Assist with monitoring legal and regulatory developments, track and implement changes in data protection and regulatory laws, ensuring the business remains compliant.
• Project Support: Advise on legal and privacy aspects of key business initiatives, including product development and digital transformation.
• Risk Management: Support identification and recording of privacy risks, identify and manage legal, regulatory, and data protection risks, and report on them to senior stakeholders.
• Documentation Review: Review product specifications, marketing materials, and internal documents to ensure legal and privacy compliance.
• Policy Development: Assist with drafting and updating policies and procedures, draft, maintain and implement company-wide policies and procedures related to data protection and legal compliance.
• Stakeholder Support: Support the DPO in responding to queries, act as the first point of contact for internal teams on legal and data protection matters, providing timely and practical advice.
• Data Protection Operations: Assist with administration and coordination of DSARs, DPIAs, JIRAs and privacy activities, support day-to-day privacy operations, including handling DSARs, DPIAs, JIRAs, consent management, data retention, and breach reporting.
• Training & Awareness: Help develop training materials and awareness campaigns, assisting People Team with online training on data protection matters and create resources to promote a culture of privacy and compliance across the business.
• Incident Response: Support investigation and documentation of data protection incidents, assist in managing data breaches and liaise with regulators and external counsel when needed.

Knowledge and Skills

Essential

• Strong interest in data protection, privacy, compliance and regulation.
• Excellent written and verbal communication skills.
• Good organisational and administrative skills.
• Ability to manage competing priorities and meet deadlines.
• Strong attention to detail.
• Ability to analyse information and solve problems.
• Proficient in Microsoft Office applications.

Desirable

• Degree, A-Level, BTEC or equivalent qualifications.
• Previous office, customer service, administration or financial services experience.
• Awareness of GDPR, UK Data Protection Act 2018 or information governance principles.
• Experience using Microsoft Office, SharePoint or workflow management systems.

Training and Development

• The successful candidate will be supported in undertaking a recognised apprenticeship qualification related to Data Protection, Compliance, Risk or Business Administration.
• Ongoing training will be provided by the Data Protection Officer, Legal Team and wider Risk Department.

Other

• Strong communication, analytical and interpersonal skills.
• Ability to manage multiple projects and prioritise workload, adhering to business requirements, timescales and deadlines.
• Sound legal and commercial judgment and ability to build robust relationships and with suppliers.

Mobilize Financial Services Way

We Love All Our Customers

“We value the rich diversity that all of our customers bring to our business. We share a culture of professionalism, excellence and collaboration across the company that puts the customer at the heart of everything we do.”

Key Points: Provide sound legal, regulatory and data protection advice and oversight to facilitate ongoing compliance and support the delivery of new projects, products and services to customers including related contracts.

We Do the Right Thing

“Integrity is the core of everything we do. We are committed to being honest, trustworthy and transparent. We do the right thing – even when no one is watching”

Key Points: Be consistent to apply the legal and regulatory requirements and FCA Principles for Business across RCI FS. Ensure new legal and regulatory requirements and compliance obligations arising are analysed and appropriately and proportionately applied.

We Decide and Do

“We are performance oriented, focused on sustainable growth and profit. We reward initiative-taking and innovation. Everyone is accountable for their personal and collective contribution. We listen, we discuss, we speak up; we decide and we do.”

Key Points: Understand business objectives, consider stakeholder priorities, identify risks and advise on solutions to enable effective and sound decisions. Be fair to assist colleagues to meet their objectives whilst holding firm to legal, regulatory and data protection requirements and the FCA Principles for Business.

We Transform Together

“Transformation comes from building on our successes and learning from our failures. Our teams are encouraged to share regular and constructive feedback. We take each and every challenge as an adventure to learn and transform.”

Key Points: Identify training gaps in relation to legal, regulatory and data protection principles and implement such training across the business. Involve the Legal, Compliance and Internal Control functions to develop a consistent and clear controls framework. Create a positive environment which encourages the process owners to engage in constructive compliance dialogue.

We Speak the Truth

“We speak using facts and objective data and are open to new and differing perspectives. We create conditions for respectful listening and productive debates enabling us to take quick and transparent decisions.”

Key Points: Work closely with commercial colleagues to deliver compliant and practical solutions. Take time to appreciate the views and opinions of others. Build trust with the process owners as a reference point for day-to-day compliance matters arising.

We Make it Simple

“We seek simplicity and efficiency. In a complex environment, we are agile with decisions taken at the right level to benefit all of our customers.”

Key Points: Communicate complex legal principles clearly and effectively to stakeholders and commercial colleagues.

How to apply

To apply for this role and to find out more, please click on the apply button. Please note that applications may close before the application deadline, so apply early to avoid disappointment.