Data Protection Manager

Remote

6 Month Contract

£21.60 per hour

37.5 hours per week

The client would like the ideal candidate to spend a week on site at the beginning of the contract in order to set up IT and meeting team members.

About the company

Our client, a Higher Education provider, is looking to recruit an Data Protection Manager who will have particular responsibility for data protection and whilst the role is quite varied, the particular focus for the interim post will be on data protection compliance in the organisation’s contractual and data sharing arrangements. This will include supporting the procurement process in the approval of contracts, working with research colleagues in research data sharing arrangements, and ensuring compliance where there is an international transfer of personal data. Given the focus on contractual compliance, candidates with a legal background (in data protection or information governance) may be suitable.

The role holder will work collaboratively with Academic and Professional Services divisions, to develop a wide network to support and embed compliance, requiring effective relationship building with staff at all levels. You will need to plan, prioritise and organise the workload in order to meet statutory/regulatory deadlines and commercial requirements, and to manage any reputational risks to the organisation.

The role is part of the Information Management and Compliance team, who are responsible for casework, policy and regulatory compliance in a number of key areas, including data protection, privacy, records management and Freedom of Information legislation.

KEY TASKS AND MAIN RESONSIBILITIES

• Contract Reviews – Data Protection and Compliance

• Supporting Data Protection Impact Assessments

PRINCIPAL ACCOUNTABILITIES

·         Manage, promote and maintain a high-quality service, engendering a culture of continuous improvement.

·         Manage the operational outputs of the team, ensuring the provision of consistent advice and guidance in an accessible format.

·         Ensure compliance with all relevant legislation and policies, interpreting the same and advising on their practical application.

·         Work in partnership with other key stakeholders, principally with colleagues in other Professional Services divisions (specifically Research and Knowledge Exchange, IT, Finance/Procurement and the Office of General Counsel) to ensure a seamless service, providing advice and guidance on data protection and privacy matters.

·         Act as a key point of contact for all data protection and privacy queries and personal data breach reports, providing practical advice and guidance to staff on complying with the requirements of the data protection and privacy regimes.

·         Reviewing documentation and considering the implications and options for the organisation.

·         Ensure an in-depth understanding of the personal data processed across the organisation, capturing this in data flow maps, privacy notices and associated documentation.

·         Act as the central point of contact for all consultation responses relating to data protection and privacy, ensuring that the organisations response is coordinated, timely and consistent, and keeping an accurate record of such consultations and logs.

KEY RESPONSIBILITIES

Service Delivery

·         Working within regulated policy and procedure, undertake day-to-day management of all operational data protection and privacy matters.

·         Plan and implement activities across the team and with relevant stakeholders to ensure the achievement of statutory deadlines.

·         Ensure compliance with data protection obligations in the context of research, commercial arrangements, projects and developments through the provision of advice and completion of Data Sharing Agreements, Data Protection contractual clauses and Data Protection Impact Assessments.

·         Ensure effective systems and procedures are in place to meet statutory deadlines and compliance with data protection and privacy matters.

·         Plan and implement improvements to systems and procedures to ensure effective administration, including making recommendations to the Executive and relevant Committees for policy changes and process improvements.

·         Maintain appropriate records and documentation commensurate with policy and procedure and legislative requirements for accountability documents.

·         Provide reports internally and externally as appropriate. To undertake analysis, interpretation and presentation of data protection and privacy policy, legislative and HE sector changes to inform decision-making.

Policy and Procedure

·         Collate, review and disseminate communications and updates relating to data protection and privacy from external bodies such as the ICO and First Tier Tribunal, proactively monitoring legal and policy developments within the HE sector relating to data protection and privacy.

·         Provide advice to enquiries on the application of data protection and privacy policy/procedure, including the retention, storage and destruction of personal data and other information, auditing compliance with retention schedules and records management.

·         Contribute to policy decisions and improvements ensuring that emerging/agreed policy changes are effectively communicated and implemented, along with sector best practice.

·         Establish and maintain a central bank of policies, procedures and notices in relation to data protection and privacy for the organisation and ensure they are reviewed in accordance with the agreed review cycle.

Team Management and Leadership

·         Provide management and leadership to motivate the team to achieve targets and objectives.

·         Ensure the availability of resources to achieve targets and objectives including the selection, induction, performance management and development of team members.

·         Support the development of a organisations network of data protection stakeholders, champions and Information Asset Owners, providing training and coaching to ensure a culture of awareness of and compliance with data protection and privacy obligations.

·         Foster an ethos of continuous improvement, engaging with key stakeholders to capture feedback.

Customers and Stakeholders

·         Proactively work with internal and external stakeholders and colleagues within the team to ensure effective service delivery, exchange of information and provision of data to inform decisions as necessary, showing appropriate sensitivity when needed.

​

PERSON SPECIFICATION

• Educated to degree level, or other equivalent qualification, or relevant level of experience.

• A detailed practical knowledge and understanding of data protection legislation and privacy requirements.

• Experience of contract review and understanding the importance of data protection regulations pertaining to the information presented

• Significant experience of providing advice and guidance with drafting/reviewing documentation to high standards to ensure legal and regulatory compliance.

• Experienced in drafting policies, procedures and guidance, with the ability to have a sound grasp of technical detail, balanced with a strategic and pragmatic perspective.

• Ability to effectively manage staff.

• Well-developed oral and written communication skills with the ability to present complex policy and procedures in a way that can be understood by the audience.

• Planning and organisational skills, with the ability to delegate to team members where appropriate.

• Exceptional interpersonal skills with the ability to effectively influence in area of expertise, effectively contribute to team working to build and develop working relationships.

• Analytical skills with the ability to generate effective solutions and make effective decisions.

• Excellent IT Skills on MS platform with experience using functional databases.