Data Protection Officer

We are ideally looking for someone with GDPR implementation experience in a large, nationwide business.  

Job Purpose
To fulfil the legal requirements of the Data Protection Officer as defined by the Information Commissioners Office
To inform and advise the organisation and its employees about their obligations to comply with the GDPR and other data protection laws.
To monitor compliance with the GDPR and other data protection laws, including managing internal data protection activities, advise on data protection impact assessments; train staff and conduct internal audits.
To be the first point of contact for supervisory authorities (Information Commissioners Office - ICO) and for individuals whose data is processed (employees, Residents, customers etc.).
To positively drive a positive information assurance culture into the organisation

Key Corporate Responsibilities

To educate the organisation's leadership and employees on the legal requirements of information assurance. This includes the delivery of training and awareness workshops as appropriate to the roles concerned (for example Leaders, Information Asset Owners, HR and staff in general) and their responsibilities.
To evaluate, monitor and report on the levels of organisational compliance with DPA, GDPR and all other data protection legislation.
To perform and provide advice on privacy impact assessments on existing information management arrangements and future change project implementations.
Provide recommended courses of action to achieve and maintain compliance with data protection legislation. Provide advice to Leadership when considering plans and deciding course of action.
To lead, evaluate, monitor and report progress to Senior Leadership on the implementation of agreed plans and courses of action.
Monitor, report and provide recommendations to improve the effectiveness of the operational process of receipt and responses to Freedom of Information, Subject Access Request and other data protection related legislation requests within the statutory timescales
Provide advice and guidance on the application of exemptions to information requests to ensure they comply with the appropriate legislation.
Assist with appeals relating to information requests to ensure responses are compliant with legislation.
Provide advice and guidance on data protection issues in the context of data protection law including data breaches.
To be the primary point of contact for the Information Commissioners Office including informing the ICO of data breaches

Key Service Responsibilities
To create, promote, monitor and continuously improve the existing organisations levels of compliance with data protection legislation.
To ensure new services introduced are compliant with data protection legislation by design.
To deliver cultural change to ensure all employees are well versed in data protection and consider data protection as part of their daily activities.
To develop and maintain effective relationships with the ICO, Leadership and suppliers.
To identify and lead the identification of opportunities to improve compliance and cultural improvement.
To represent corporately and nationally to ensure that the data protection interests are promoted, protected and developed including monitoring of external events, changes in legislation and good practice across other organisations.
To prepare reports for the leadership, and in support of the Head of Standards and Compliance, on required areas of compliance, risk and recommendations on specific actions required.
To develop data protection policies and contribute to the development of policies with data protection implications to ensure policy compliance with data protection legislation.
To have a commitment to, and understanding of, the policies and procedures including equalities and diversity, health and safety, security, customer care and the use of personal data.

Essential criteria
A professional qualification or equivalent (including relevant experience) covering information assurance and security, data protection law with evidence of continuous professional development
Expertise in national and European data protection laws and practices including an in depth understanding of GDPR.
Knowledge of operational service delivery areas, organisations and understanding of related processing operations.
Understanding of information technologies and data security.

Experience of working with senior leadership teams and leaders to ensure that they are fully aware of the…