Deputy Data Protection Officer

Main Responsibility

• Supporting and helping to maintain a robust governance framework within the IOPC that will support compliance with privacy and data protection legislation;
• Working collaboratively with colleagues in the FOI and DP Team, Knowledge and Information Management Team, Archives and Records Management, Operations Management, IT and other areas of the organisation with policy and governance responsibilities, to ensure data privacy and protection compliance is integrated into IOPC policies, standards and procedures (whilst avoiding any duplication of effort); 
• Leading on the completion and maintenance of personal data inventories, registers and maps required to support compliance with privacy and data protection recordkeeping, transparency and accountability requirements; overseeing the provision of associated specialist advice and guidance; and working with IOPC colleagues to integrate them (and the concepts of personal data processing ‘record-keeping’, ‘transparency’ and ‘accountability’) into the IOPC’s culture and ways of working;
• Co-ordinating and management of personal data inventories/maps, audits and Data Protection Impact Assessments (DPIAs); 
• Managing the team’s stakeholder relationships in conjunction with internal comms and press team.
• Working with the Procurement Team to ensure appropriate data processor agreements are in place with any external service providers acting as a data processor for the IOPC;
• Working with the Stakeholder Engagement Team and other relevant colleagues, to ensure that appropriate overarching governance arrangements for the sharing of personal data (template Memoranda of Understanding etc.) are fit for purpose;
• Working proactively with internal teams to ensure that appropriate privacy and data protection training materials are being provided and promoted to staff;
• Overseeing the periodic collation and analysis of relevant statistics and management information covering: the volumes of personal data being processed by different areas of the organisation; the number, severity and causes of personal data breaches; the timescales associated with the completion of DPIAs, audits and associated and a risk analysis for each individual area of the business, the number of staff completing privacy and data protection training; the number of live privacy and data protection complaints and regulatory investigations; the timeliness of the Department’s responses to data subject rights requests.
• Advising and influencing colleagues up to the level of Director, who are responsible for: governance; business processes, systems and other technologies used to process personal data; personal data disclosure/sharing activities; the detection and resolution of information security incidents; the processing of requests for access to personal data held by the IOPC; procurement and contract management activities;
• Engaging and negotiating with: partner organisations; other government departments and agencies; regulatory bodies (including the Information Commissioner's Office (ICO);

The Ideal Candidate

Essential Knowledge and Experience

• An in-depth knowledge of current UK and EU privacy and data protection legislation (including the Data Protection Act 2018, General Data Protection Regulation, Human Rights Act, Privacy and Electronic Communications Regulations, ePrivacy Directive)
• Experience of working in an auditing/compliance/governance context and good knowledge of compliance audit best practice.
• Experience and a foundation level knowledge of internal auditing.
• An in-depth knowledge of relevant statutory codes of practice, decisions and guidance issued by: the ICO; courts and tribunals; the Article 29 Working Party; and other relevant sources;
• The ability to anticipate/evaluate potential privacy and data protection compliance challenges (including changes to the law, organisational structures, business processes, etc.) and identify pragmatic solutions;
• Excellent communication, influencing, negotiation and stakeholder management skills; with the ability to articulate persuasive arguments both verbally and in writing;
• The ability to assimilate and interpret information quickly; and explain complex legal, regulatory and policy requirements to colleagues and external stakeholders at all levels;
• The ability to manage/prioritise a large and varied workload, take decisions under pressure on own initiative and meet challenging deadlines (setting and adjusting competing priorities in a rapidly changing environment);

Technical

• Qualified as a Certified Internal Auditor Or a qualified data protection practitioner with 12 months experience and a foundation level knowledge of internal auditing, or,
• A qualified data protection practitioner

Desirable

• Previous involvement in championing or supporting behaviour change within a large organisation (ideally focussed on establishing an effective privacy and data protection compliance culture);
• One or more relevant privacy and data protection or risk management practitioner certifications (e.g. CIPP/E, CIPM, BCS Practitioner Certificate in Data Protection, PC.dp, CFIRM, IRMCert, CISA, CRISC, etc.).

Reasonable Adjustments

The IOPC is a diverse and inclusive workplace and we want to help you demonstrate your full potential whatever type of assessment is used. We are open to providing you with the tools you need to succeed, from extra time to formatting changes, to name a mere few. If you require any reasonable adjustments to our recruitment process, please email humanresources@policeconduct.gov.uk

Package Description

• 27.5 days paid annual leave (increasing with service to 32.5 days)
• Options to carry over, buy or sell annual leave
• Civil Service pension
• PAM employee assistance programme
• Access to Civil Service Sports Council (CSSC) membership
• Staff networks focused on each of the protected characteristics – run for staff, by staff
• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity behaviours

Additional Information:

The IOPC is not eligible to participate in the Civil Service transfer process, therefore successful candidates will not be able to transfer to the IOPC on their existing terms and conditions.

The IOPC does not participate in the UK Visa Sponsorship Scheme therefore, candidates will have to provide evidence of their Right to Work in the UK if offered a role with us.

This role is exempt from the Rehabilitation of Offenders Act 1974, therefore a standard Disclosure and Barring Service (DBS) check will be carried out for the successful candidate during the pre-employment process.

Any move to the Independent Office for Police Conduct from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may, however, be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk

Although we are currently unable to guarantee a longer or more permanent contract, if the role can be extended or made permanent, the successful post holder may be offered the role firstly without further interview.

About the Company

As a completely independent organisation, the IOPC seeks to uphold the rights of the public and investigate the most serious matters, including deaths following police contact, to promote learning and influence change in policing. The IOPC is an organisation steeped in history, influenced by significant figures such as Stephen Lawrence and Sir William Macpherson. We are looking for people to uphold our core values, and in return we will give you a supportive and inclusive work environment to flourish in.

Be yourself

The IOPC is committed to promoting equality and valuing diversity in everything we do. Our vision is to be, and to be seen as, a leader in inclusive employment and services, demonstrating this ethos in everything that we do.

• As a silver standard Stonewall employer, we continue to commit to being a LGBTQ+ employer through the work of our Pride LGBTQ+ Staff Network, creating welcoming environments for lesbian, gay, bi and queer people.
• We are pleased to share that we are a signatory of the Business in the Community Race at Work Charter. The Charter is composed of five calls to action for leaders and organisations across all sectors. 
• Being a Disability Confident employer, the IOPC is dedicated to removing the barriers for disabled people to thrive in the workplace.
• Our Staff Networks are constantly working to make the IOPC the leaders of inclusive employment, from our Allyship Programme to Welsh Language Standards and our Know the Line Policy, we are constantly seeking new ways to create an environment for all to develop and thrive.