Data Protection Manager

Join to apply for the Data Protection Manager role at Victoria and Albert Museum

Join to apply for the Data Protection Manager role at Victoria and Albert Museum

This range is provided by Victoria and Albert Museum. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

The Role

As the Data Protection Manager, you will be focused on maintaining the V&A’s compliance with all relevant data protection privacy legislation. You will implement policy and procedural changes throughout the organisation, employing pragmatism where appropriate, and will be responsible for monitoring and supporting ongoing compliance.

You will work closely with the outsourced Data Protection Officer (DPO), who will be responsible for making both strategic and tactical policy decisions as well as providing guidance and advice. You will bring your knowledge and understanding of the organisation to influence the DPO in the creation of these policy decisions. You will be responsible for executing the DPO recommendations and ensuring that they are implemented in ways that involve the wider V&A organisation and are sympathetic to its culture.

What will you be doing?

• Establish and nurture good working relationships with key members of the business community to build up an understanding of the data related issues the V&A faces and any specific issues that arise on an ad hoc basis.
• Coordinate all compliance activities for relevant legislation (such as GDPR) reporting back to the DPO and senior management team on progress.
• Report to both the Director of Technology and the DPO on a regular basis identifying areas of risk or non- compliance that need attention.
• Audit internal activities to ensure agreed policies and procedures are being adhered to.
• Turn the DPO’s recommendations into practical tasks that can be implemented within the organisation to reduce the V&A’s overall risk and maintain a high level of legal compliance.
• Lead and train the Departmental Data Champions to ensure new projects undergo Data Privacy Impact Assessments (DPIA’s) and are compliant with legislation and that all 3rd party contracts are highlighted to the DPO and Legal Counsel for legislative alignment.
• Work with HR colleagues to develop and deliver annual Data Protection training across the organisation.
• Working with the Director of Technology ensure that data breach notifications, Subject Access Requests (SARs) and other Subject Rights Requests are responded to in a timely and efficient manner as required by legislation.
• Ensure the organisation’s Record of Processing Activities (ROPA) is maintained.
• Ensure the organisation’s Information Asset Register is up to date and accurate.
• Support other areas of information compliance and security, including Freedom of Information and the maintenance of information risk registers.
• Conduct risk assessments identifying potential risks and recommend mitigation strategies as part of completing data protection impact assessments (DPIA).
• Maintain a log of all data protection incidents with details on the cause and impact along with lessons learned.
• Responsible for processing Subject Access Requests, Right to be Forgotten, and FOI requests.

Who are we looking for?

• Recognised Data Protection qualification (CIPP/E, CIPM, CDPO, PC.dp or equivalent)

• At least 3-years’ experience in a senior data protection role

• Demonstrable understanding of data protection and the UK legislation that controls it

• Demonstrable experience defining and implementing appropriate data protection controls

• Able to identify compliance gaps, undertake analysis, challenge poor practices and make effective recommendations

• Able to assess the implication of new projects and activities in order to give advice and offer pragmatic solutions

• Able to quickly establish credibility and develop and maintain effective relationships with a wide range of business units

• Significant experience of managing and prioritising a high workload and multiple complex issues in a changing environment with tight deadlines

• Analytical mind able to absorb the complete picture, pick out…