It Consultant à United States

Glasgow Prestwick Airport (GPA) has an exciting opportunity for a part time Data Protection Officer to oversee, manage and monitor GPA’s compliance with regulatory and statutory provisions as directed by the Scottish Government. The role is permanent, office based, 24 hours per week between Monday to Friday.

The ideal candidate will have a genuine passion for data protection, a minimum of 2 years’ experience and hold an industry recognised qualification in Data Protection and / or Records Management or any other related subject. This is broadly a standalone role, reporting directly to the Human Resources Director so will require an individual who is self-motivated, has a “can do” proactive attitude, excellent administration skills and is able to work on their own initiative within agreed boundaries.

Key Accountabilities:

• Act as the nominated officer and single point of contact for GPA in relation to Data Protection, Records Management and relevant associated Public Sector Requirements.
• To oversee the management of (and compliance with) data protection and associated legislation, including relevant associated public sector requirements, as appropriate.
• To lead on the implementation and progress of GPA’s Records Management Plan.

Key Responsibilities:

Data Protection:

• Maintain and regularly review the policies and procedures contained in the GPA Information Governance Manual, ensuring they are compliant with data protection laws including UK GDPR.
• Inform, advise, and issue recommendations to the Company regarding compliance with data protection laws including UK GDPR, and Company policies and guidelines with respect to data protection and records management.
• Foster a data protection culture within the business and help to embed essential elements of the UK GDPR, such as the principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security of processing, awareness training, and notification and communication of data breaches.
• Provide advice concerning data protection impact assessments (DPIAs) and monitor their performance pursuant to the provisions of the law, including whether and how to carry out a DPIA, what safeguards (including technical and organisational measures) to apply to mitigate any risks to the rights and interests of the data subjects, and whether or not the DPIA has been correctly carried out in compliance with UK GDPR.
• Maintain the record of processing operations and key repositories or personal data under the responsibility of the controller and manage related data protection inventories.
• Co-operate with and be the contact person for the designated supervisory and other data protection authorities, and consult, where appropriate, on issues relating to processing.
• Identify and manage risks related to data protection and records management, escalating risks and issues to Executive team when appropriate.
• Offer consultation in relation to any information security events.
• To record, liaise with and support HR in relation to subject access requests as required.
• To support the IT department with access control of CCTV on site, ensuring the CCTV policy (Security Procedures Manual) is being adhered to.
• To collate, push and burn CCTV footage in relation to any requests made, ensuring the Security IT Data form is completed and authorised.

Records Management:

• To implement, maintain, monitor, and review GPA’s Records Management Plan and associated guidance, policies and procedures
• Responsible for the GPA Publication Scheme, ensuring consistency against expected standards across all classes of information.
• To advise and provide guidance on all aspects of records management, including the introduction of effective and appropriate management of both hard copy and electronic records.
• To promote good records management and raise awareness of records management issues.
• To advise on retention and disposal periods and establish schedules.

Other:

• Attend regular/ongoing training for the role as required.
• To develop, deliver and maintain training in data protection and records management for GPA employees as required.
• To conduct internal audits on Data Protection and Records Management.
• Prepare and provide Data Protection and Records Management statistics to the Executive Team as required.
• To liaise with external stakeholders, such as the Keeper of the Records of Scotland, the Information Commissioner, the Scottish Information Commissioner, and the Scottish Government, as appropriate.
• To participate in Projects and Working Groups as required, providing advice/support in relation to data protection and records management to ensure compliance with all relevant legislation and the policies/procedures contained in the GPA Information Governance Manual.
• To chair any Data Protection Working Groups.

Person Specification

Qualifications:

An industry recognised qualification in Data Protection and/or Records Management or any other related subject would be a distinct advantage.

Experience and Skills:

• A minimum of 2-years’ experience as a subject matter expert alongside leading/monitoring compliance with UK data protection legislation, including UKGDPR and the Data Protection Act 2018, including the related policy and process development is essential.
• A genuine passion for data protection alongside a proven ability to effectively advocate the importance of compliance and good record keeping that will positively influence non-experts at all levels is essential.
• Experience in managing an organisation’s records from creation, retention and eventual disposal is essential.
• Experience of risk management principles and conducting internal compliance audits is essential.
• Experience of leading on compliance with the Public Records (Scotland) Act 2011 including the preparation, implementation and on-going review of a Records Management Plan would be an advantage.

Personal Attributes:

• Excellent communicator, both verbally and in writing, who can create clear requirements, guidance and documentation for both internal and external stakeholders at all levels.
• Strong problem-solver who pays attention to detail and can analyse/extract information by questioning, active listening and interviewing.
• Ability to work on own initiative within agreed boundaries.
• Ability to work under pressure and manage conflicting priorities.
• Flexible & Resilient
• Self Confidence

Remuneration:

A competitive salary, this will be discussed upon offer, depending on the skills and knowledge of the individualand in addition you benefit from:

• Free onsite parking.
• Being auto enrolled into a pension scheme (after 3 months) – enhanced upon request.
• Access to our health cash plan (after 6 months).
• Staff discounts in partnership with Dufry World Duty Free.
• Learning and developing within a fast-paced aviation environment.
• Being part of a dedicated and friendly team.

Please note that to work at GPA you are required to:

• Comply with UK Right to Work checks and provide associated relevant documentation at interview.
• Confirm your identity by providing a copy of your passport or driving licence.
• Provide GPA with a complete five-year referencing history inclusive of all employment, self-employment, and education. Any gap period of 28 days or more must be covered by a personal reference to which you must also provide contact details.
• Upon request, provide a Criminal Record Check Certificate (Basic Disclosure) from Disclosure Scotland. This must not display any disqualifying convictions as detailed on the Civil Aviation Authority website.
• Where applicable, undertake a Counter Terrorist Check (CTC) and understand that deployment to any security related activities is conditional upon the satisfactory result of such a check.

We are proud to be a Disability Confident employer and are committed to applying equal opportunities at all stages of our recruitment and selection process. Reasonable adjustments will be made to our recruitment process to ensure that no applicant is disadvantaged.

If you are interested in applying, please complete the following:

• A completed Company Application for Employment form
• Read our Equal Opportunities Policy and complete an Equal Opportunities Form

Please note that if you are NOT a passport holder of the country for the vacancy you might need a work permit. Check our Blog for more information.

Bank or payment details should not be provided when applying for a job. Eurojobs.com is not responsible for any external website content. All applications should be made via the 'Apply now' button.

Created on 26/04/2025 by TN United Kingdom