Head of Data Protection and Security

Monarch IT are working with a public sector organisation to appoint a Head of Data Security and Protection. You will be working between the North Birmingham office, as well as working from home. 2 days office/ 3 days WFH. Salary: Up to £75,000 based on exp.

The Head of Data Security and Data Protection will be the organisations subject matter expert on all aspects of Data security and Data, compliance and auditing. You'll be the recognised authority and advisor on all Data Protection matters acting in the interests of the data subject. As the Head of Data Protection and Security you'll also be the recognised authority and advisor on all Information Governance matters and as such provide an organisation-wide advisory and guidance service. You will need to provide expert advice and guidance to the organisation around Confidentiality and Data Protection, and Information Security.

You will be working closely with other sites within the Midlands to maintain agreed objectives, as well as providing leadership and advice on DP matters. In this position you will ooperate independently across the organisation, where you'll identify how the organisation should operate in relation to the General Data Protection Regulation (GDPR), set targets, stipulate the direction in relation to Data Protection compliance and consult directly with the supervisory body; namely the Information Commissioners Office.

Duties:

• Be the recognised authority on all data protection matters within the organisation and as such provide an organisational wide advisory and guidance service on highly complex information legislation matters where there can be differing opinions.
• You will be the SME around monitoring compliance with the GDPR and other data protection laws, including managing internal data protection activities, advise on data protection impact assessments; train staff and conduct internal audits.
• Collect information to identify processing activities, Analyse and check the compliance of processing activities
• Pprovide advice in relation to the completion of Data Protection Impact Assessments
• Develop and implement Data Protection Impact Assessments
• Have a risk-based approach to prioritise work
• Writing, implementing, reviewing and updating organisation wide policies, guidelines, protocols, procedures and processes to ensure data protection compliance and the safe and effective management of information.