Deputy DPO and Compliance Improvement Manager

Luton Borough Council; Luton; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A local government organization in Luton seeks an experienced Deputy Data Protection Officer and Compliance Improvement Manager to enhance information governance and ensure compliance with data protection legislation. The role involves developing frameworks, managing compliance performance, and leading responses to data breaches. Ideal candidates will have a strong background in UK data protection, effective stakeholder engagement skills, and experience in delivering training programs. Excellent staff benefits and a focus on work-life balance are provided.

Benefits

25 to 32 days' annual leave

Buying annual leave scheme

Career Pathways

Generous pension scheme

Relocation package up to £8,000

Employee Assistance Programme

Flexible working options

Unlimited access to development courses

Staff offers

Discounts on local bus travel

Qualifications

• Experience in compliance and data protection within public sector.
• Ability to draft and review data protection policies.
• Proven leadership in managing Subject Access Requests and data breaches.

Responsibilities

• Develop and oversee data protection compliance framework.
• Lead responses to data breaches and regulatory inquiries.
• Design and deliver training on data protection policies.

Skills

Information governance expertise

Understanding of UK data protection legislation

Data analytics and reporting

Stakeholder engagement

Training delivery

Education

Degree or equivalent qualification

Practitioner-level qualification in data protection

Job description

Luton Borough Council is seeking an experienced and motivated Deputy Data Protection Officer and Compliance Improvement Manager to play a key role in strengthening information governance and ensuring council-wide compliance with data protection legislation. Reporting to the Data Protection Officer, you will support the delivery of a robust and effective data protection and compliance framework across the organisation. You will monitor and report on data protection performance, using data analytics and reporting tools to identify trends, areas of risk and opportunities for improvement. Where issues are identified, you will lead on implementing corrective actions and ensuring appropriate risk mitigation and escalation processes are in place. A core part of the role involves leading and supporting responses to Subject Access Requests (SARs) and managing personal data breaches, including advising whether incidents meet the threshold for reporting to the Information Commissioner's Office (ICO). You will act as a key point of contact for the ICO, cooperating on matters such as data breaches, investigations and regulatory enquiries. You will draft, review and maintain data protection policies, procedures and guidance, and provide expert advice on data protection, Freedom of Information (FOI), Environmental Information Regulations (EIR) and information sharing agreements. You will also lead or support Data Protection Impact Assessments (DPIAs), ensuring privacy risks are identified and addressed at an early stage. The role has a strong improvement and engagement focus. You will design and deliver training on data protection and information governance, promote awareness of data protection responsibilities across departments, and support organisational change initiatives to improve data handling practices and compliance. You will work closely with services to ensure information governance arrangements align with council priorities and enable effective service delivery. You will advise senior officers and elected members on complex governance and compliance issues, lead cross‑departmental working groups, and represent the council at regional and national forums on data protection and compliance. You will also contribute to the ongoing development of the council's Information Governance Framework and support internal audits and external inspections, ensuring the council is well prepared and that actions are followed through. This is a high‑profile role requiring strong judgement, collaboration and leadership, offering the opportunity to make a real impact on how the council protects information and maintains public trust.

You are an experienced information governance or data protection professional with a strong understanding of the UK data protection landscape and a practical, solutions‑focused approach to compliance. You have demonstrable experience of ensuring compliance with data protection legislation, including UK GDPR and the Data Protection Act 2018, with the ability to interpret complex legislation, assess compliance risks and translate requirements into clear, actionable guidance for services. You are confident in monitoring and reporting on data protection compliance performance, using dashboards, performance data and insight to drive improvement and support effective decision‑making. You have experience of leading and managing responses to Subject Access Requests (SARs), Freedom of Information (FOI) requests, Environmental Information Regulations (EIR) requests, information sharing agreements and personal data breaches. You are familiar with ICO procedures and enforcement, and able to exercise sound judgement when advising on regulatory engagement and escalation. You are skilled in drafting, reviewing and maintaining data protection policies, procedures and guidance, and have experience of designing and delivering engaging training on data protection and information governance to a wide range of audiences. You are comfortable leading cross‑departmental working groups, influencing stakeholders at different levels, and representing an organisation in external or partnership forums. You bring strong written and verbal communication skills, with the ability to produce clear reports, policies and training materials. You can manage competing priorities and deadlines effectively, work independently with minimal supervision, and maintain confidentiality and integrity, even when working under pressure. You have experience of supporting organisational change initiatives, internal audits and external inspections, helping organisations improve compliance and readiness. You also demonstrate a clear understanding of equality issues and relevant legislation, and are committed to promoting fair, lawful and transparent data handling practices. You will hold a degree (or equivalent) or a relevant vocational qualification, alongside a relevant practitioner‑level professional qualification in data protection, information governance or a related field. You are able to attend meetings both within and outside the borough when required, work flexibly to meet service needs, and are comfortable working remotely while covering service operating hours. This is a public facing role so you'll need to show off your fluency in speaking and writing English.

Our ambitious Luton 2040 Vision – that no‑one in Luton will have to live in poverty – is at the heart of everything we do. We recognise that our people are remarkable, talented, committed and passionate about serving our residents. The people of Luton depend heavily on this council – and that means our workforce! Are you ready to realise the remarkable and help us deliver our vision?

We offer a range of excellent staff benefits which include:

• From 25 to 32 days' annual leave: linked to length of service and grade
• Buying annual leave scheme: buy up to 20 days additional annual leave
• Career Pathways: step up in your career or move into a specialist area
• Pension scheme: with generous employer contributions of up to 20.2 per cent (at July 2023) and 3x salary death in service grant
• Generous relocation package: up to £8,000 (subject to eligibility)
• Employee Assistance Programme: a free, 24/7 confidential counselling and wellbeing support service available to all employees, their partner or spouse and dependent children over 16 still living at home
• Work/life balance: flexible working options including working from home where possible. We welcome requests for flexible working arrangements including part‑time hours and alternative working patterns
• Training and support: unlimited access to development courses, mentoring and support and clear career pathways
• Staff offers: includes discounts on your MOT, gym and fitness, restaurants and salons
• Arriva Travel Club: great value savings on local bus travel