Data Protection Officer

Marcus Donald are currently looking for a Data Protection Officer (DPO) who will have the overall responsibility for the ongoing implementation and delivery of the businesses Data Protection Policy, assuring compliance with the Data Protection Act 2018 and the General Data Protection Regulation, and other applicable data protection legislation and regulation.

**This a home based position with minimal travel involved**

The successful DPO will collaborate with other organisational units that are involved in processing personal data, such as Marketing, HR, IT, Information Security, Operational Support and Front-Line Services to offer guidance and support, overseeing all Data Subject Requests (DSR) ensuring each DSR is fulfilled in accordance with legal obligations.

You will oversee the data privacy and data protection procedures and guidance notes, to ensure adherence by all business operations, and make sure that the organisation processes Personally Identifiable Information (PII) of data subjects (employees, customers, volunteers, and other individuals) in compliance with its obligations.

You will work collaboratively with other organisational units that are involved in processing personal data, such as Marketing, HR, IT, Information Security, Operational Support and Front-Line Services to offer guidance and support.

Experience of working in data protection and/or information security, with experience of developing, implementing and enhancing data protection compliance programmes is wanted.

Main duties and Responsibilities - Data Protection Officer:

• Ensuring compliance with the Data Protection Act 2018 and the General Data Protection Regulation
• Investigating potential and actual data protection breaches and incidents and ensuring that appropriate corrective and preventive actions are implemented.
• Reporting breaches and incidents to interested parties
• Where necessary, preparing Data Protection Impact Assessments and other Controller/Processor records
• Responding within the required timeframe to all Data Subject Requests (including interrogation of databases, email servers, recordings and all other repositories of personal data, including hard copies)
• Producing Privacy Notices for groups of data subjects, websites etc. and any other data protection-specific documents
• Completing a full audit of current data governance arrangements (strategy, framework, privacy notices and policies, processes, systems, and contracts) including all business functions and ensuring all align to the ISO 27001 ISMS.
• Liaising with the Head of Information Security to ensure that data protection training for all the business functions is included in the Trust’s Information Security Awareness Training module
• Liaising with the Head of Information Security to ensure that data protection risks, and associated mitigations are identified on the Information Security Asset Risk Assessment and Treatment Register

Benefits - Data Protection Officer:

Being a Data Protection Officer, the job role may come with bonuses. Such as 25 days holiday per annum, excluding bank holidays, and private medical care with days off sick pay throughout the year. Being in this job role it creates a strong career path for you to be able to achieve your desired career goals throughout the years you are at the company.

If this is a job role that interests, you or you have any more questions about the job role please do not hesitate to contact Ryan Solan (rsolan@marcusdonald.com) with any questions and/or queries you may have.