Data Protection Officer

**Details**:
**Reference number**:

- 419846

**Salary**:

- £55,403 - £61,939
- Important information about pay - it is expected that from 1 October 2025 the pay for this role will be £58,655. In addition once the role holder has completed their probationary period (usually 6 months) they will become eligible to receive a pay premium allowance of £4,399 per annum. This pay premium allowance is non contractual and non pensionable.
- A Civil Service Pension with an employer contribution of 28.97%

GBP

**Job grade**:

- Grade 7

**Contract type**:

- Permanent

**Business area**:

- CO - Infected Blood Compensation Authority (IBCA)

**Type of role**:

- Other

**Working pattern**:

- Full-time

**Number of jobs available**:

- 1

**Contents**:

- Location
- About the job
- Benefits
- Things you need to know

**Location**:

- Glasgow, Newcastle-upon-Tyne

**About the job**:
**Job summary**:
**_ Opportunities to move to the new Infected Blood Compensation Authority (IBCA)_**
- Please note that the mission of IBCA means that it is likely to be operational for a period of approximately 5 to 7 years. When IBCA’s work begins to wind down, IBCA employees will receive support and practical guidance to find a new role, whether in the Civil Service, another Arms Length Body (ALB), or an external employer. _

**Job description**:
The Data Protection Officer will report to the Head of Data Governance, and will sit alongside the other Data Governance workstreams, which are:

- Knowledge and Information Management
- Information Rights and Disclosure
- Data Acquisition and Quality.

The post-holder will serve as the Authority’s statutory DPO.

The role will be dynamic and fast paced, so that IBCA is able to deliver a service that is underpinned by quality, trustworthy data.

The role includes line management responsibility for one member of staff, who in turn will support the DPO with their duties.

**Main Responsibilities**
- Engage with operational teams and external stakeholders to deliver a data protection framework across the organisation and support its compliance with relevant legislation.
- Continue to develop IBCA’s data protection strategy and policy.
- Lead on the assurance of Data Protection Impact Assessments when new or alternative processing is proposed. Influence the development of systems and processes to adopt a privacy by design and default approach across the organisation to meet compliance with the strategic and organisational objectives.
- Ensure compliance with the UK GDPR and other data protection laws, developing our data protection policies, processes and procedures, including managing internal data protection activities and conducting compliance reviews.
- Deliver statutory data protection requirements, including providing advice and assistance on data security incidents to support decision making decisions on breaches and whether to report them to the Information Commissioner’s Office (ICO).
- Advise on the lawfulness of using IBCA’s statutory powers.
- Provide assurance of compliance re: IBCA’s policies, processes and digital tools.
- Determine lawful bases for processing and controllership.
- Safeguard and champion privacy issues insofar as IBCA’s use of personal data.
- Create and support with data protection products and procedures.
- Manage IBCAs data protection functions, including producing and maintaining clear, accessible, user-friendly procedures, processes, forms and guidance.
- Develop and deliver data protection training programmes.
- Any other relevant data protection issues the Authority may be required to address.

**Person specification**:
**Essential Criteria**
- You will exhibit leadership skills in order to set a direction for the organisation and to champion the importance of data protection compliance, as well as to successfully develop your direct report.
- You should be able to articulate your decisions clearly, showing a robust supporting rationale. You should be able to think strategically and consider a range of options, and recommend the best course so as to manage organisational impact.
- You should be comfortable communicating with a range of audiences, to provide assurance to senior leaders as well as to provide guidance to operational staff. You should be able to anticipate the training needs of the organisation with reference to its activities, and design and deliver appropriate materials accordingly.
- You should have an understanding of data protection standards across government and experience of creating, implementing and embedding policies within an organisation, with a clear vision for best practice.
- You should be able to anticipate, assess and capture relevant risks, and design mitigations accordingly. You should be able to prioritise effectively while considering the big picture.
- You will be able to effectively bring constructive challenge, while working positively as part of a team both within the Data Directorate as well as across the Authority.

**