Data Protection Officer

HC-One Ltd.; Tees Valley; On-site; GBP 65,000 - 98,000; Full time

Benefits offered by this job

Award-winning learning and development

25 days annual leave

GP online – 24/7 access

Colleague discounts

Employee Assistance Programme

Job summary

HC-One Ltd. seeks an experienced Data Protection Officer with GDPR implementation expertise to oversee legal compliance across a nationwide care group.

You will inform and advise on data protection obligations, monitor GDPR compliance, conduct DPIAs, train staff and lead internal audits. You will be the primary contact for the Information Commissioner’s Office and for individuals whose data is processed, driving a culture of information assurance and robust data protection practices across the

Qualifications

• Professional qualification covering information assurance and data protection law.
• Experience leading GDPR/compliance programs at scale.
• Proven ability to deliver staff training and awareness on data protection.

Responsibilities

• Educate leadership and employees on GDPR and information assurance.
• Monitor compliance and advise on DPIAs and audits.
• Be primary contact for ICO and data subjects.
• Lead improvement of data protection culture across the organisation.

Skills

GDPR implementation

Information assurance

Leadership

Training & awareness

Data protection laws

Data breach response

Education

Professional qualification in information assurance/security

Job description

About the role

We are ideally looking for someone with GDPR implementation experience in a large, nationwide business.

Job PurposeTo fulfil the legal requirements of the Data Protection Officer as defined by the Information Commissioners OfficeTo inform and advise the organisation and its employees about their obligations to comply with the GDPR and other data protection laws.To monitor compliance with the GDPR and other data protection laws, including managing internal data protection activities, advise on data protection impact assessments; train staff and conduct internal audits.To be the first point of contact for supervisory authorities (Information Commissioners Office - ICO) and for individuals whose data is processed (employees, Residents, customers etc.).

To positively drive a positive information assurance culture into the organisation

Key Corporate Responsibilities

To educate the organisation's leadership and employees on the legal requirements of information assurance. This includes the delivery of training and awareness workshops as appropriate to the roles concerned (for example Leaders, Information Asset Owners, HR and staff in general) and their responsibilities.To evaluate, monitor and report on the levels of organisational compliance with DPA, GDPR and all other data protection legislation.To perform and provide advice on privacy impact assessments on existing information management arrangements and future change project implementations.Provide recommended courses of action to achieve and maintain compliance with data protection legislation. Provide advice toLeadership when considering plans and deciding course of action.To lead, evaluate, monitor and report progress to Senior Leadership on the implementation of agreed plans and courses of action.Monitor, report and provide recommendations to improve the effectiveness of the operational process of receipt and responses to Freedom of Information, Subject Access Request and other data protection related legislation requests within the statutory timescalesProvide advice and guidance on the application of exemptions to information requests to ensure they comply with the appropriate legislation.

Assist with appeals relating to information requests to ensure responses are compliant with legislation.Provide advice and guidance on data protection issues in the context of data protection law including data breaches.To be the primary point of contact for the Information Commissioners Office including informing the ICO of data breaches

Key Service Responsibilities

To create, promote, monitor and continuously improve the existing organisations levels of compliance with data protection legislation.To ensure new services introduced are compliant with data protection legislation by design.To deliver cultural change to ensure all employees are well versed in data protection and consider data protection as part of their daily activities.

To develop and maintain effective relationships with the ICO, Leadership and suppliers.To identify and lead the identification of opportunities to improve compliance and cultural improvement.To represent corporately and nationally to ensure that the data protection interests are promoted, protected and developed including monitoring of external events, changes in legislation and good practice across other organisations.To prepare reports for the leadership, and in support of the Head of Standards and Compliance, on required areas of compliance, risk and recommendations on specific actions required.To develop data protection policies and contribute to the development of policies with data protection implications to ensure policy compliance with data protection legislation.To have a commitment to, and understanding of, the policies and procedures including equalities and diversity, health and safety, security, customer care and the use of personal data.

About The Company

HC-One offers professional residential, nursing and specialist dementia care for older people. We aim to be the first choice care home in each community for Residents and Colleagues; we will achieve this mission through providing the kindest possible care to Residents in over 280 care homes across the United Kingdom.

We are very proud of our outstanding team at HC-One. They are caring, warm-hearted and professional people who have a clear understanding of our Residents individual needs, choices and wishes.

We are passionate about ensuring that our current and future Colleagues can be their true selves, and that our workforce represents the communities we serve. We prioritise inclusive working practices and invite applicants from all backgrounds into our HC-One family.

What HC-One offer

Complimenting your salary, you will enjoy access to a huge variety of benefits and services to support your physical and psychological well-being and throughout your career we will invest in you and you will enjoy additional support and benefits including:

• Award-winning learning and development
• 25 days annual leave
• An opportunity to learn from experienced colleagues as part of an outstanding and committed team.
• GP online - providing around the clock GP consultation via an interactive app - available to you and your children under 16
• Colleague discounts – Access to over 1600 high street discounts including carefully selected discount partners
• Wellbeing - free of charge access to an independent and confidential Employee Assistance Programme. This gives Colleagues and their family access to 24/7 365 support for a whole range of issues including physical, mental and financial issues

We want you to have an amazing experience working at HC-One, starting with our commitment to providing the quickest possible turnaround from the point of making you a job offer to you starting with us on day one.

About You

Essential criteriaA professional qualification or equivalent (including relevant experience) covering information assurance and security, data protection law with evidence of continuous professional developmentExpertise in national and European data protection laws and practices including an in depth understanding of GDPR.Knowledge of operational service delivery areas, organisations and understanding of related processing operations.Understanding of information technologies and data security.Experience of working with senior leadership teams and leaders to ensure that they are fully aware of the legal and technical implications to enable effective decision making.

Successful track record in leadership of planning, design and evaluation of cultural and technical information assurance projects across multiple business areas that promote data protection improvement and culture.Experience of leadership of technical matrix teams to deliver information assurance improvement including provision of training and awareness.Experience of successful financial management with evidence of ability to maximise the use of resources and to operate within agreed financial constraints.Excellent understanding of equality and diversity issues with the ability and commitment to promote and develop positive initiatives in all aspects of work.

Safeguarding is everyone’s responsibility and therefore it is important that you are able to recognise the signs which may indicate possible abuse, harm or neglect in its different forms and know what to do if there are any concerns. All colleagues are required to attend safeguarding training appropriate to their role and to undertake additional training in associated areas. You also have the ability to seek appropriate advice and report concerns, including escalation if action is not taken.