EOI - Data Protection Operations Lead

Digital, Data and Technology (DDaT)

We are transforming DCMS to meet the needs of a modern, delivery-focused department working on some of governments highest-priority agendas to drive growth, enrich lives and level-up society.

Our modernisation plans include investing in systems that are fit for purpose, reduce manual work and improve how colleagues across DCMS use technology, data and digital services. This includes developing a strong central digital capability for the department.

We also want to improve how we solve policy challenges by using user-centred design and working in multidisciplinary teams. This is an exciting time to join, as the team is shaping how digital, data and technology support delivery across DCMS.

Our mission is to digitally enable how DCMS delivers its priority outcomes and respond to the changing needs of the sectors and partners we work with. If you want to help shape that journey, this is a great time to join us.

This is a short-term role for a maximum of 1 year, which is available on both level transfer and temporary promotion.

As a Data Protection Operations Lead, you will:

• Develop data management policies
• Provide expert guidance to the department on how to meet legal obligations
• Assess data processes to highlight risks, and make recommendations
• Audit information to make sure data protection measures are effective
• Draft or edit printed and online content around data protection
• Respond to information requests and data breaches
• Produce face-to-face and online training for staff
• Maintain accurate records of data processing activities
• Keep up to date with developments in legislation in the UK and overseas

The ideal candidate would have the following skills:

Essential requirements:

• A current working knowledge, experience and understanding of UK & EU GDPR, DPA 2018 and PECR, particularly:
• Responding to information rights requests, (particularly Subject Access Requests) from individuals
• Existing working practices within central or local government, including risk management, ROPA, data privacy impact assessment governance & compliance framework
• In a comparable business environment, experience of providing evidence based, risk balanced advice to seniors, presenting complex considerations in clear and non-technical terms
• Proven ability to adapt to changing priorities whilst maintaining focus in fast paced environments

Desirable skills:

• Qualified to CIPP/e
• Certified Data Protection Practitioner (PC.dp)
• BCS Practitioner Certificate in Data Protection (DPA2018 & GDPR) or equivalent
• Able to demonstrate technical expertise that is equivalent to the qualifications