Senior Data Protection & DPIA Risk Lead

Government Recruitment Service; City of Edinburgh; On-site; GBP 45,000 - 53,000; Full time

Benefits offered by this job

Disability Confident

Job summary

The Department for Business, Innovation, Science and Trade (BIST) appointment of a Senior Data Protection Advisor is based in Edinburgh with a permanent, full-time role. You will lead DPIA reviews, work across Digital, Knowledge and Information Management, and collaborate with the CISO/DPO to safeguard data while enabling innovation and digital services.

You will draft privacy notices, data sharing agreements and Article 28 clauses, coordinate ICO consultations and manage the Data Protection

Qualifications

• Lead complex, high-risk DPIA reviews from triage to sign-off.
• Draft and assure privacy notices and data sharing agreements.
• Coordinate with CISO/DPO and senior governance forums.

Responsibilities

• Lead DPIA reviews and provide risk mitigation for key processing activities.
• Identify and mitigate data protection risks with teams and suppliers.
• Ensure RoPA accuracy and documentation of processing activities.
• Liaise with CISO and DPO on medium/high risks.
• Coordinate with Cyber, Commercial and Technology SMEs on Article 28 clauses.
• Support ICO consultations and produce decision-ready risk products.
• Administrate the Data Protection Assurance platform and drive improvements.
• Line-manage junior analysts within the Data Protection Team.

Skills

DPIA leadership

Risk assurance

Privacy notices

Data sharing agreements

Article 28 clauses

ICO consultation

Leadership

Job description

The Department for Business, Innovation, Science and Trade (BIST) appointment of a Senior Data Protection Advisor is based in Edinburgh with a permanent, full-time role. You will lead DPIA reviews, work across Digital, Knowledge and Information Management, and collaborate with the CISO/DPO to safeguard data while enabling innovation and digital services.

You will draft privacy notices, data sharing agreements and Article 28 clauses, coordinate ICO consultations and manage the Data Protection