Data Protection Officer

St John of God University Hospital; Dublin; On-site; EUR 70,000 - 110,000; Full time

Job summary

St John of God University Hospital seeks a Data Protection Officer to ensure GDPR and Data Protection Act compliance, advising management and monitoring governance. The DPO will act as the contact point for the DPC and data subjects, safeguarding privacy across the hospital and related services.

The role requires a Level 8 degree or higher in a relevant field and 3–5+ years of data protection experience; CIPM/CIPP/E is desirable.

Qualifications

• Degree (Level 8 or higher) in law, information governance, IT, health administration, or related field.
• Desirable: CIPM, CIPP/E, Advanced Diploma in Data Protection Law.
• 3–5+ years' experience in data protection, information governance, or compliance.
• Proven experience handling DPIAs, subject access requests, and breach investigations.
• Managing external requests (gardai, Solicitors, Regulators).
• Familiarity with data processing contracts and vendor management.

Responsibilities

• Advise management on GDPR/compliance and monitor ongoing adherence to data protection requirements.
• Act as primary contact for the Data Protection Commission and for data subjects.
• Safeguard the privacy rights of patients, staff and stakeholders and oversee DPIAs and breach investigations.

Skills

DPIA experience

Breach investigations

Subject access requests

Vendor management

Education

Degree (Level 8+) in law / information governance / IT / health administration

Job description

Data Protection Officer (Grade VII Clerical) - Permanent, Full-time

Role Summary

To ensure St John of God University Hospital clg. complies with all applicable data protection legislation including the EU General Data Protection Regulation (GDPR), the Data Protection Acts 1988-2018, and health-sector specific requirements, safeguarding the rights and privacy of patients, staff, and stakeholders. The DPO will advise management, monitor compliance, and act as the Hospital's, Mental Health Frist Aid Ireland and St Joseph's, contact point for the Data Protection Commission and for data subjects.

Essential Qualifications

• Degree (Level 8 or higher) in law, information governance, IT, health administration, or related field
• Professional qualification in data protection/privacy (e.g. CIPM, CIPP/E, Advanced Diploma in Data Protection Law) is desirable.
• 3-5+ years' experience in data protection, information governance, or compliance - ideally within the healthcare or public sector.
• Proven experience handling DPIAs, subject access requests, and breach investigations.
• Managing external requests (gardai, Solicitors, Regulators)
• Familiarity with data processing contracts and vendor management.