Anna Nyass

Responsibilities: Collaborating with the Head of Information Security & Privacy / DPO to: - Identify and analyze regulatory obligations for data protection and privacy. - Mature and enhance the privacy management framework. - Mature and enhance the privacy compliance framework. - Mature and enhance the privacy risk management. - Managing Records of Processing Activities (RoPAs). - Conducting Data Protection Impact Assessments (DPIAs). - Managing and responding to Data Subject Access Requests (DSARs). - Maintaining and enhancing the company data retention policy and schedule, ensuring it is embedded across all areas of the business. - Maintaining and enhancing privacy minimum requirements. - Providing advice, guidance, and instruction on data protection and privacy issues across the organization. - Responding to customer data protection and privacy requests. - Championing data privacy compliance. - Providing assurance on compliance with data protection and privacy obligations both internally and where we use suppliers for the provision of services. - Supporting stakeholders in the review of data protection and privacy-related contractual obligations. - Developing and enhancing data protection and privacy policies and procedures. - Maintaining and enhancing data protection and privacy training. - Acting as the first point of contact for supervisory authorities and our representative in the EU. - Supporting the management of data protection incidents, and any post-incident response. - Developing and maintaining data protection and privacy Management Information (MI) and metrics.

• Acted as the first line of defence for data protection matters. • Delegated tasks and responsibilities effectively within the team. • Monitored compliance with data protection laws and regulations. • Identified threats to data privacy and implemented mitigation measures. • Conducted regular data security audits to ensure data safety. • Advised on compliance best practices. • Managed Data Subject Access Requests (DSARs) for employees, customers, and stakeholders, ensuring GDPR compliance. • Supported ICO complaints and breach reporting, serving as the first line of defence in data protection matters. • Monitored compliance with GDPR, UK Data Protection Act, and other regulatory requirements. • Developed and enhanced the Privacy Management and Compliance Frameworks to strengthen governance. • Provided data protection training and acted as a key referral point for colleagues. • Advised on data retention policies and implemented best practices across the organization. • Liaised with regulatory authorities, including the ICO, on privacy matters and compliance monitoring. • Oversaw audits and data security measures to identify and address potential risks. • Developed and maintained privacy metrics and reporting, offering insights to senior management.

• Established customer relationships to meet personal banking needs and generate revenue. • Provided referrals to Wealth Sales and Branch Specialists based on customer needs. • Acquired new-to-bank customers and met individual key performance indicators. • Promoted and facilitated digital banking, ensuring adherence to procedures and regulations. • Audited daily tasks at the branch and acted as a first line of defence against risk or fraudulent activity. • Led and developed the team while supporting customers through various banking channels. • Responsible for daily branch operations and project support.

• Reported daily sales and updates to the head office. • Managed visual merchandising, stock control, and deliveries. • Led team management, rota planning, and recruitment/training of staff. • Delivered exceptional customer service and resolved complaints effectively. • Met store sales targets and handled budgets while adhering to brand standards.

• Led sales and profitability strategies to enhance revenue and customer engagement. • Ensured compliance with brand policies and high standards of service. • Managed stock levels, supplier relationships, and business reporting.