Data Protection Advisor

This is an exciting time to work in the Department for International Trade (DIT), at the very heart of the UK’s international trading relationship with the global economy.

DIT supports UK businesses to take advantage of the global appetite for British goods and services, as well as to assist international companies to collaborate with UK suppliers. We are based in Whitehall but also have offices both across the country and around the world.

Knowledge and information management play an important role within the Department for International Trade. It is imperative that systems and sustainable procedures are in place so that material is held securely, knowledge is not lost, and information is properly managed, controlled and exploited.

The Data Protection Team sits in the Knowledge and Information Management Team (KIM). Key KIM functions and responsibilities/ownership include information management, governance, organisation transparency, freedom of information, data protection and records management.

**Job description**

This exciting opportunity within the Data Protection Team will involve supporting the implementation of UK GDPR compliance into ‘business as usual’ activities across DIT by playing a key role across a number of workstreams.

You will be responsible for:

- Monitoring and promoting compliance with data protection legislation, and ensuring that best practice is followed.
- Providing expert, well-structured and detailed advice and guidance to colleagues about their obligations under data protection legislation.
- Identifying privacy risks and appropriate mitigations by undertaking Data Protection Impact Assessments (DPIAs).
- Assisting the Deputy DPO as a key point of contact for handling data breach notifications, investigating incidents and making recommendations.
- Helping to drive engagement with and adherence to policies and standards at an operational level, shaping the overall data protection and information strategy.
- Providing assurance to ensure controls which manage data protection risks are adequately designed and implemented as to be effective.
- Assisting with the roll out of UK GDPR awareness across the department and wider business.

**Hybrid Working**

Please be aware that this role can only be worked from within the UK and not overseas.

Informal hybrid working arrangements will be available as agreed with the vacancy manager and in line with the requirements of the role.

Most DIT employees will be working a hybrid pattern, spending 2-3 days a week (pro rata) in an office, on average. If your office location is London, you will be eligible to receive London weighting.

For this role, the Department will not consider sponsoring a visa or issuing a Certificate of Sponsorship. Please note we are unable to offer advice on any Visa and Immigration cases.

**Person specification**

**Essential criteria**

While a data protection qualification is not mandatory, the following are essential requirements for the role:

- Experience in a data protection role or a demonstrable understanding of information management, data protection and the associated legislation.
- Experience responding to Subject Access Requests (SARs) per legislative requirements.
- Experience conducting Data Protection Impact Assessments (DPIAs) and/or managing data protection risks.
- Experience managing a wide range of stakeholders.

**Desirable Criteria**
- Practitioner certificate in Data Protection.
- An applied understanding of the Freedom of Information Act.
- Relevant professional qualification or equivalent extensive experience in a dedicated Information Governance, Security, Privacy or Data Protection management and / or compliance role.

**Personal Attributes & Skills**
- Be an enthusiastic individual who is able to work collaboratively with other team members to deliver high quality work in a pressured environment.
- Possess strong written and verbal communication skills, and the ability to confidently engage with teams and stakeholders across DIT.
- Show good attention to detail.
- Possess excellent organisation and time management skills.
- Show resilience under pressure, delivering to tight deadlines.

**Behaviours**

We'll assess you against these behaviours during the selection process:

- Communicating and Influencing
- Seeing the Big Picture
- Making Effective Decisions

**Technical skills**

We'll assess you against these technical skills during the selection process:

- Data Protection knowledge and expertise

**Benefits**
- Learning and development tailored to your role
- An environment with flexible working options
- A culture encouraging inclusion and diversity
- A Civil Service pensionwith an average employer contribution of 27%

**Things you need to know**

**Selection process details**

This vacancy is using Success Profiles, and will assess your Behaviours, Strengths, Experience and Technical skills.

**Further Information**

**Reasonable Adjustment**

**Vetting Requirements**

UK