Data Protection Officer

**Glasgow Prestwick Airport (GPA) has an exciting opportunity for a part time Data Protection Officer to oversee, manage and monitor GPA’s compliance with regulatory and statutory provisions as directed by the Scottish Government. The role is permanent, office based, 24 hours per week between Monday to Friday.**

Owned by the Scottish Government, Glasgow Prestwick Airport directly employs more than 250 people and supports over 4,000 jobs across the aerospace cluster. Situated in the heart of Scotland’s aerospace industry we offer a diverse range of in-house aviation services providing vital connections to the rest of the world.

**Key Accountabilities**:
Act as the nominated officer and single point of contact for GPA in relation to Data Protection, Records Management, and relevant associated Public Sector Requirements.

To oversee the management of (and compliance with) data protection and associated legislation, including relevant associated public sector requirements, as appropriate.

To lead on the implementation and progress of GPA’s Records Management Plan.

**Key Responsibilities**:
Data Protection:

- Maintain and regularly review the policies and procedures contained in the GPA Information Governance Manual, ensuring they are compliant with data protection laws including UK GDPR.
- Inform, advise, and issue recommendations to the Company regarding compliance with data protection laws including UK GDPR, and Company policies and guidelines with respect to data protection and records management.
- Maintain the record of processing operations and key repositories or personal data under the responsibility of the controller and manage related data protection inventories.
- Co-operate with and be the contact person for the designated supervisory and other data protection authorities, and consult, where appropriate, on issues relating to processing.
- Identify and manage risks related to data protection and records management, escalating risks and issues to Executive team when appropriate.
- Offer consultation in relation to any information security events.
- To support the IT department with access control of CCTV on site, ensuring the CCTV policy (Security Procedures Manual) is being adhered to.
- To collate, push and burn CCTV footage in relation to any requests made, ensuring the Security IT Data form is completed and authorised.

Records Management:

- To implement, maintain, monitor, and review GPA’s Records Management Plan and associated guidance, policies and procedures.
- Responsible for the GPA Publication Scheme, ensuring consistency against expected standards across all classes of information.
- To advise and provide guidance on all aspects of records management, including the introduction of effective and appropriate management of both hard copy and electronic records.
- To promote good records management and raise awareness of records management issues.
- To advise on retention and disposal periods and establish schedules.

Other:

- Attend regular/ongoing training for the role as required.
- To develop, deliver and maintain training in data protection and records management for GPA employees as required.
- To conduct internal audits on Data Protection and Records Management.
- Prepare and provide Data Protection and Records Management statistics to the Executive Team as required.
- To liaise with external stakeholders, such as the Keeper of the Records of Scotland, the Information Commissioner, the Scottish Information Commissioner, and the Scottish Government, as appropriate.
- To participate in Projects and Working Groups as required, providing advice/support in relation to data protection and records management to ensure compliance with all relevant legislation and the policies/procedures contained in the GPA Information Governance Manual.
- To chair any Data Protection Working Groups.

**Qualifications**, Experience and Skills**:
A genuine passion for data protection alongside a proven ability to effectively advocate the importance of compliance and good record keeping that will positively influence non-experts at all levels is essential.

Experience in managing an organisation’s records from creation, retention and eventual disposal is essential.

Experience of risk management principles and conducting internal compliance audits is essential.

Experience of leading on compliance with the Public Records (Scotland) Act 2011 including the preparation, implementation and on-going review of a Records Management Plan would be an advantage.

**Personal Attributes**:
Excellent communicator, both verbally and in writing, who can create clear requirements, guidance, and documentation for both internal and external stakeholders at all levels.

Strong problem-solver who pays attention to detail and can analyse/extract information by questioning, active listening, and interviewing.

Ability to work on own initiative within agreed boundaries.

Ability to work under pressure and manage confl