Data Protection Officer (Hybrid Working) based in Derby

MHA; East Midlands; Hybrid; GBP 47,000 - 63,000; Full time

Benefits offered by this job

33 Days Holiday

Blue Light Card

Chaplaincy service

Life assurance

Job summary

MHA (Methodist Homes) seeks a Data Protection Officer to lead information governance, ensure UK GDPR compliance, and act as the principal data protection adviser across the organisation. Hybrid working from Derby, 37 hours per week, reporting to General Counsel.

You will develop policies, oversee audits, manage DSPT submissions, handle data subject requests, train staff, and liaise with ICO and external partners.

Qualifications

• Significant experience in data protection and information governance.
• Expert knowledge of UK GDPR, Data Protection Act 2018, PECR, and Access to Health Records Act 1990.
• Proven track record of maintaining compliance records and organisational accountability.

Responsibilities

• Lead the organisation's data protection and privacy program.
• Manage annual NHS DSPT submission and data protection audits.
• Coordinate breach response and ICO reporting; implement corrective actions.
• Provide guidance on DPIAs and Legitimate Interest Assessments and train staff.

Skills

Data protection

Information governance

Regulatory compliance

Tools

Microsoft Excel

Job description

Data Protection Officer (Hybrid Working) based in Derby

37 hours per week – Monday to Friday - Hybrid working model

Salary £55,105 per annum

An excellent opportunity to join the in-house Governance Team.

We have an exciting opportunity for a Data Protection Officer. This role is responsible for ensuring Methodist Homes (MHA) complies with all relevant data protection and privacy legislation, including the UK General Data Protection Regulations (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and the Access to Health Records Act 1990. Reporting to the General Counsel/Company Secretary, the Data Protection Officer (DPO) acts as the organisation’s lead expert on data protection, providing advice, guidance, and assurance to managers, employees, and anyone processing personal data on MHA’s behalf. The role oversees the development, maintenance, and review of information governance policies to ensure that personal information is handled lawfully, securely, and in line with best practice.

The DPO serves as MHA’s central point of contact for data protection matters, including being the primary contact with the Information Commissioner’s Office (ICO). The DPO also liaises with law enforcement agencies, local authorities, the NHS, law firms, and other third parties. The role leads the response to personal data breaches, ensuring incidents are investigated, reported to the ICO where required, corrective actions are implemented, and lessons learned are embedded across the organisation. The DPO also manages requests from individuals exercising their data protection rights and ensures these are handled promptly and effectively.

A key aspect of the role is monitoring and improving compliance across the organisation. This includes maintaining records required by legislation, conducting regular data protection audits and compliance reviews, managing the annual NHS Data Security and Protection Toolkit (DSPT) submission, and ensuring colleagues complete the required data protection and information governance training. The DPO is also responsible for promoting a culture of privacy by design, providing expert guidance on Data Protection Impact Assessments and Legitimate Interest Assessments, and ensuring high-risk processing activities are appropriately assessed and escalated where necessary.

We are ideally looking for:

• Significant experience in data protection and information governance.
• Expert knowledge of the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR), and Access to Health Records Act 1990.
• A proven track record of maintaining compliance records and evidencing organisational accountability under data protection legislation.
• Experienced in implementing change and influencing organisational culture in response to legislative developments and regulatory guidance from the ICO.
• A highly motivated individual who can work independently.
• A high level of professional integrity, confidentiality, and expertise.
• A flexible attitude to work and a willingness to get stuck in and travel as required to carry out investigations, training, and meetings across MHA locations.
• An effective communicator with the ability to influence, challenge, and build strong stakeholder relationships at all levels of the organisation.
• Excellent IT skills with extensive Microsoft Excel experience.

At MHA we are committed to helping people live later life well. You’ll joining an organisation that values collaboration, respect and continuous improvement, where your contribution will make a meaningful difference to residents and colleagues alike.

Perks of joining the MHA family:

• Values-driven culture - we're super proud of our culture. Click here to learn more.
• Access to Blue Light Card - The UK's no.1 discount service for emergency services, NHS, social care sector & armed forces.
• 33 Days Holiday - including bank holidays (pro-rata FTE is 37 hrs per week).
• Care and Support for You - Our in-house Chaplaincy service is widely recognised within MHA and beyond and is available to all staff members who may benefit from pastoral care and support.
• Buy and Sell Annual Leave – buy or sell up to a week’s holiday per annum (depending on your annual entitlement).
• MHA Cares for You – Our bespoke scheme offering a wide range of deals and discounts in leading retailers and online stores.
• Highly supportive leadership team.
• Occupational Sick-Pay
• Life assurance for contracted-hours colleagues.

Please note that interviews may take place prior to the closing date and if a suitable candidate is appointed the role may close early.

Recruitment agencies: please note, MHA do not accept unsolicited CVs from recruitment agencies, regardless of whether they are on our Preferred Supplier List (PSL). We only accept CVs from agencies that have been appointed and briefed by MHA’s Recruitment Team.

MHA are fully committed to the principles of equality, diversity and inclusion (EDI) as this is embedded in our values: respect, nurture and inspire. In addition, as a committed employer we have been awarded level 2 under the Disability Confident Scheme. Click here to read more about this.

Equality, diversity and inclusion

MHA are fully committed to the principles of equality, diversity and inclusion (EDI) as this is embedded in our values: respect, nurture and inspire. In addition, as a committed employer we have been awarded level 2 under the Disability Confident Scheme.

Please note that interviews may take place prior to the closing date and if a suitable candidate is appointed the role may close early.

Recruitment agencies: please note, MHA do not accept unsolicited CVs from recruitment agencies, regardless of whether they are on our Preferred Supplier List (PSL). We only accept CVs from agencies that have been appointed and briefed by MHA’s Talent Acquisition Team.