Data Protection Manager

Victoria and Albert Museum; London; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

29 days of holiday + public holidays

5.5% employee pension contribution, 10% employer contribution

Life assurance scheme

Job summary

A renowned cultural institution in London seeks a Data Protection Manager to ensure compliance with data protection legislation. Responsibilities include maintaining relationships with key stakeholders, coordinating activities for compliance, and leading training on data protection throughout the organization. The ideal candidate has a recognized data protection qualification and at least three years' experience in a senior data protection role.

Qualifications

• At least 3-years’ experience in a senior data protection role.
• Demonstrable understanding of data protection and relevant UK legislation.
• Able to quickly establish credibility and develop effective relationships.

Responsibilities

• Maintain compliance with data protection legislation.
• Coordinate compliance activities and report to senior management.
• Lead training on Data Protection across the organisation.

Skills

Data Protection qualification (CIPP/E, CIPM, CDPO)

Experience in a senior data protection role

Understanding of UK data protection legislation

Identifying compliance gaps

Manages multiple complex issues

Education

Recognised Data Protection qualification

Job description

Join to apply for the Data Protection Manager role at Victoria and Albert Museum

Join to apply for the Data Protection Manager role at Victoria and Albert Museum

Victoria and Albert Museum provided pay range

This range is provided by Victoria and Albert Museum. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

The Role

As the Data Protection Manager, you will be focused on maintaining the V&A’s compliance with all relevant data protection privacy legislation. You will implement policy and procedural changes throughout the organisation, employing pragmatism where appropriate, and will be responsible for monitoring and supporting ongoing compliance.

You will work closely with the outsourced Data Protection Officer (DPO), who will be responsible for making both strategic and tactical policy decisions as well as providing guidance and advice. You will bring your knowledge and understanding of the organisation to influence the DPO in the creation of these policy decisions. You will be responsible for executing the DPO recommendations and ensuring that they are implemented in ways that involve the wider V&A organisation and are sympathetic to its culture.

What will you be doing?

• Establish and nurture good working relationships with key members of the business community to build up an understanding of the data related issues the V&A faces and any specific issues that arise on an ad hoc basis.
• Coordinate all compliance activities for relevant legislation (such as GDPR) reporting back to the DPO and senior management team on progress.
• Report to both the Director of Technology and the DPO on a regular basis identifying areas of risk or non- compliance that need attention.
• Audit internal activities to ensure agreed policies and procedures are being adhered to.
• Turn the DPO’s recommendations into practical tasks that can be implemented within the organisation to reduce the V&A’s overall risk and maintain a high level of legal compliance.
• Lead and train the Departmental Data Champions to ensure new projects undergo Data Privacy Impact Assessments (DPIA’s) and are compliant with legislation and that all 3rd party contracts are highlighted to the DPO and Legal Counsel for legislative alignment.
• Work with HR colleagues to develop and deliver annual Data Protection training across the organisation.
• Working with the Director of Technology ensure that data breach notifications, Subject Access Requests (SARs) and other Subject Rights Requests are responded to in a timely and efficient manner as required by legislation.
• Ensure the organisation’s Record of Processing Activities (ROPA) is maintained.
• Ensure the organisation’s Information Asset Register is up to date and accurate.
• Support other areas of information compliance and security, including Freedom of Information and the maintenance of information risk registers.
• Conduct risk assessments identifying potential risks and recommend mitigation strategies as part of completing data protection impact assessments (DPIA).
• Maintain a log of all data protection incidents with details on the cause and impact along with lessons learned.
• Responsible for processing Subject Access Requests, Right to be Forgotten, and FOI requests.

Who are we looking for?

• Recognised Data Protection qualification (CIPP/E, CIPM, CDPO, PC.dp or equivalent)

• At least 3-years’ experience in a senior data protection role

• Demonstrable understanding of data protection and the UK legislation that controls it

• Demonstrable experience defining and implementing appropriate data protection controls

• Able to identify compliance gaps, undertake analysis, challenge poor practices and make effective recommendations

• Able to assess the implication of new projects and activities in order to give advice and offer pragmatic solutions

• Able to quickly establish credibility and develop and maintain effective relationships with a wide range of business units

• Significant experience of managing and prioritising a high workload and multiple complex issues in a changing environment with tight deadlines

• Analytical mind able to absorb the complete picture, pick out the important details and make the decisions required to advance the incident or project in a positive manner

• Respects others’ expertise, time, perspectives and contribution. Takes responsibility for delivering on actions, achieving high standards and learning from mistakes. Open to change, new ideas and suggestions; looks for opportunities for improvement and self development. Works with others outside their own department in a collaborative, understanding, and engaging way.

• Shares our Values of Sustainability, Equity, Creativity, Collaboration & Generosity

What’s in it for you?

• 29 days of holiday + public holidays each year

• 5.5% employee pension contribution, 10% employer pension contribution (post-probation) • Life assurance scheme (to value of 4 x annual salary)

• Family-friendly policies e.g. enhanced maternity + paid carers leave

• Free sanitary products for all employees across our sites

• Free entrance to many major museums and exhibitions

• Benefits platform offering discounts at major retailers

& many more

Full job description and list of benefits on our website

When do applications close?

10 August @ 23:59

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Analyst, Information Technology, and Quality Assurance

• Industries

  Museums, Historical Sites, and Zoos, Museums, and Non-profit Organizations

Referrals increase your chances of interviewing at Victoria and Albert Museum by 2x

Get notified about new Data Protection Manager jobs in London Area, United Kingdom.

London, England, United Kingdom 20 hours ago

Data Governance Manager - London, UK (Hybrid)

Senior Manager, Global Privacy Operations

London, England, United Kingdom 1 week ago

Compliance Officer – Utilities – Hybrid – London

Gravesend, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

HR Risk Management and Data Privacy Manager

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

Information Technology Operations Manager

London, England, United Kingdom 1 week ago

HR Risk Management and Data Privacy Manager

Greater London, England, United Kingdom 1 week ago

Compliance Officer, Associate - SOCIETE GENERALE

London, England, United Kingdom 5 days ago

Compliance Advisory Officer - Agency Execution

London, England, United Kingdom 18 hours ago

London, England, United Kingdom 2 weeks ago

Compliance Officer - Equity Derivatives & Cross-Asset Coverage EMEA - Vice President

London, England, United Kingdom 5 days ago

City Of London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 days ago

London, England, United Kingdom 1 week ago

Registry Manager, THE MINSTER CENTRE TRUST

London, England, United Kingdom 4 days ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 day ago

Senior Data Protection Manager and Deputy Data Protection Officer

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 days ago

Compliance - Data Privacy Compliance Officer - APAC

London, England, United Kingdom 6 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.