Data Protection Officer

Morson Edge (Technology); England; On-site; GBP 50,000 - 70,000; Full time

Job summary

A prominent recruitment agency is seeking an Associate Director for a Public Sector organization in Leeds. This role necessitates providing direction on compliance with data protection laws, advising on emerging risks, and leading initiatives for data protection compliance. The ideal candidate has mid-senior level experience in Information Technology, particularly within governance and administration. This full-time position offers a chance to significantly impact data protection strategies in a key government agency.

Qualifications

• Experience as a Data Protection Officer or similar role.
• Strong knowledge of UK GDPR and data protection laws.
• Ability to respond to data protection complaints.

Responsibilities

• Advise on emerging data protection risks, including AI.
• Monitor compliance with data protection legislation.
• Lead Subject Access Requests and related rights.

Job description

Morson Edge (Technology) provided pay range

This range is provided by Morson Edge (Technology). Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Direct message the job poster from Morson Edge (Technology).

Associate Director - Public Sector Practice

Morson Edge are delighted to be supporting a leading Public Sector organisation to help recruit a DPO (Data Protection Officer) on a permanent basis. The DPO will provide advice and direction to ensure the highest standards of compliance with data protection laws and associated regulatory guidance are achieved. The role holder will fulfil all statutory tasks as defined within Article 39 of the UK GDPR.

Responsibilities

• Advise on emerging data protection risks including AI, automated decision making and evolving UK data protection reforms.
• Monitor organisational compliance with data protection legislation through audits and other available mechanisms including the ICO’s Accountability Framework.
• Provide advice on data protection impact assessments and monitor the organisation’s performance in carrying these out.
• Ensure there are effective measures in place for identifying and responding to personal data incidents, breaches and complaints.
• Provide leadership and direction about the clients’ response in the event of a serious data breach.
• Respond to data protection complaints.
• Keep updated on changes to the legislative and regulatory landscape, including emerging laws and regulation of AI technologies, that will impact the client to ensure any changes are reflected in internal policies and training.
• Serve as the first point of contact for the Information Commissioner’s Office/Information Commission and for individuals whose data is processed.
• Manage the network local Data and Information Owners (DIOs).
• Ensure there are up to date data processing agreements in place with any third parties processing personal data on behalf of the client, including appropriate contract terms with suppliers, and data sharing agreements with other data controllers.
• Maintain close liaison and oversight of the work of the BSB Data Protection Team.
• Lead and co‑ordinate handling of Subject Access Requests and the exercise of other Data Subjects’ rights and create appropriate channels of communication to allow stakeholders to exercise their rights (including webpages, emails etc). Liaise with the Head of Information Management and the Data Protection Team on BSB Subject Access Requests and the exercise of other Data Subjects’ Rights, as necessary.

Framework of Controls

• Maintain the Record of Processing Activities.
• Maintain regular review of the Accountability Tracker to assess overall compliance.
• Maintain up to date internal policies, procedures, and training for staff to handle personal data securely and appropriately.
• With the IT Team, PMO, IM Team and CSO, ensure all IT systems are UK GDPR compliant and that new suppliers complete required checks of their systems for UK GDPR compliance and information security before they are introduced.
• Help ensure the requirements of the Working Abroad Policy are met, along with other members of the Working Abroad Team, to ensure GCB’s IT systems’ security is maintained when staff work abroad.
• Maintain a scheme to monitor internal compliance and ensure identified risks are identified and shared with business teams and senior management.
• Maintain a scheme of reporting to senior management and governance groups, including but not limited to Audit Committee and GRA, to satisfy best practice, other policy or legislative requirements.
• Maintain a scheme for reporting data breaches to senior management and the ICO in line with UK GDPR, other legislation and businesses own policy requirements.

Contact

Please make contact and send your CV to discuss role.

Seniority Level

Mid‑Senior level

Employment Type

Full‑time

Job Function

Information Technology

Industries

Government Administration

Location

Leeds, England, United Kingdom (Primary)

London, England, United Kingdom (Secondary)