Role: Data Protection Officer
Contract Length: Until November 2025
Location: Enfield
IR35: Inside
Pay Rate to Intermediary: £40.01 per hour
Spinwell is recruiting for a Data Protection Officer for an excellent opportunity within the public sector.
RESPONSIBILITIES OF THE DATA PROTECTION OFFICER
- Have responsibility for delivery of the legally mandated role of Data Protection Officer for the Council and schools. The postholder will be required to register as the Data Protection Officer with the Information Commissioners Office on behalf of the Council.
- Be technically proficient as they will give advice which has legally binding consequences. The post holder must have clear expertise and ongoing professional development in data management and will be expected to hold one or more technical qualifications in data protection.
- Have accountability for the data policies within the Council and Schools, ensuring that they are reviewed at least annually or where legislation or operational changes occur.
- Have the day-to-day authority and responsibility for advising the Council and schools on compliance with the data protection laws in order that they to carry out their duties lawfully.
- Lead personally or via delegation investigation into all reported data breaches as soon as notified through to conclusion and where appropriate implement measures to prevent or mitigate reoccurrence.
- Be expected to effectively communicate, influence, and engage across all levels in the organisation ranging from the council’s most senior leadership, Directors and Assistant Director and groups of staff to the Leader and Deputy Leader, Councillors and with school governors, headteachers and school staff.
- Be the data protection contact point of liaison with regulators, third parties such as police, press, suppliers, and the public.
- Have an overarching responsibility for fostering a data protection culture within the council and schools and maintain the highest standards of integrity and professional ethics.
- Maintain the corporate Data Protection and Information Governance Risk Register and ensure that risk mitigation actions are prioritised in the Data Protection Team workplan.
- Produce regular reports on data protection compliance and issues for the highest management level of both the council and schools.
SKILLS/EXPERIENCE OF THE DATA PROTECTION OFFICER
- Qualification in data protection or information security or law or equivalent training and/or certification.
- Experience (at least 3 years) of delivering data protection services which will include drafting and updating policies and procedures, assessment of DPIA’s, Data Sharing Agreements, Data Processing Agreements, dealing with disclosure requests, dealing with data breaches.
- Demonstrable experience of providing advice and guidance at the highest levels of organisations within the business context of local government and education.
- Experience in developing data protection training, and delivery of training.
- Ability to engage, coach and motivate teams and set clear targets and expectations.
- Evidence of high levels of customer service and satisfaction.
- Experience of successfully managing performance and providing clear constructive feedback.
- Experience of successfully implementing plans and projects to time and budget.
- Demonstrates a good understanding of the political structure and role of elected members.
- Ability to work collaboratively both with own service and across other services.
- Stakeholder management.
- Good working knowledge of using MS-365 software (Word, Excel, Outlook).
- Exceptional English literacy (written, and verbal for customer facing roles) and numeracy skills.
If you are a Data Protection Officer, apply now or send your CV to Spinwell!
We welcome all applications regardless of background, in line with our commitment to diversity, equality and inclusion.
Applying to this or any other vacancy advertised by Spinwell Ltd constitutes an agreement for Spinwell Ltd to hold your details for 24 months for the purpose of assessing suitability for the advertised position and to make you aware of any other positions deemed suitable of which You will make you aware by means of either email, text or phone. In line with GDPR regulations you are able to request your details be removed from the company data at any time by emailing us