Data Protection Manager

Data Protection Manager

In the role of Data Protection Manager, you will be highly organised, have a proven track record, and demonstrate excellent technical knowledge and communication skills. You will support the on-going development and monitoring of Information Governance processes to meet the current and future requirements. You will be expected to work collaboratively to embed data protection culture across HBSUK where information is valued, protected and seen as an asset

.
You will thrive in an environment of accountability, freedom of thought and rapid growth. Every day will be different and together we will strive for excellence never forgetting our mission to make healthcare bette

r.
This role will report to the Data Protection Offic

e

r. To be considered for the the role you will require the followi

ng:
Essential Crite

ria;
EDUCATION, QUALIFICATION AND TRA

• ININGRelevant degree (e.g. Information Technology, Data Protection, Data Science, Law, or Business Administration Degree) or equivalent professional experi

ence.
EXPE

• RIENCEAt least 5-6 years of experience in data protection, privacy, or AI governance
• rolesExperience in conducting TPRAs, DPIAs, AI privacy risk an
• d TRAsExperience in managin
• g SARsExperience of working with the Data Security & Protection Toolkit
• (DSPT)Experience in managing data protection incidents and br
• eachesExperience in conducting data protection reviews for project and process c
• hangesExperience in completing and submitting data protection maturity asses
• smentsExperience in staff management or can demonstrate ability to lead team members directly or indi

rectly
KNOWLEDGE AND

• SKILLSGood communication skills and teamworking a
• pproachFamiliarity with AI governance structures and frameworks and understanding of their implications for data

bodies
De

sirable
EDUCATION, QUALIFICATION AND

• TRAININGRelevant certifications such as Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), or Artificial Intelligence Governance Profession

al (AIGP)

• EXPERIENCEExperience in managing and enhancing data protection and records management practices, supporting organisation through compliance transitions, and embedding robust information governance frameworks across varying busi
• ness sizesExperience of working in the NHS and/or a technology platfor
• m providerISO 27701 or 27001 certification or auditing

experience
KNOWLEDGE

• AND SKILLSKnowledge of GDPR compliance and data protection laws related to vendor
• managementSkills in providing data protection support and guidance during the contracting process wit
• h suppliersExperience in implementing and completing data protection improvement progra
• mme of workPerforming due diligence on third parties to highlight and mitigat
• e key risksAbility to explain how AI technologies work and their implications on d
• ata privacyAbility to incorporate automation in day-t

o-day work.
OTHER JOB-RELATED

• REQUIREMENTSAbility to work in a fast-paced environment, managing multiple priorities effectively while maintaining attentio

n to detail.
Within this position, you wi

• ll mainly be;
  Through your work, support the implementation of the H
• BSUK Strategy.Assist with HBSUK’s data protection programme of improvement work including reviewing Data Privacy Impact Assessments (DPIAs), Data Protection Agreements (DPAs) and Data Sharing Agre
• ements (DSAs).Provide data protection support and guidance in the contracting process with third parties, including completing Third Party Risk Assess
• ments (TPRAs).Draft and update Data Govern
• ance policies.Support the Head of Data Protection and Data Protection Officer (DPO) in implementing HBSUK Data Govern
• ance strategy.Support the DPO with the Data Security and Protection Toolkit (DPST) internal audit and the annu
• al submission.Support Information Asset Owners (IAOs) in keeping the Records of Processing Agreements (ROPAs) up to date and in mitigating risk. Work with IAOs and their support to ensure information is retained in line with HBSUK policies a
• nd procedures.Respond to Subject Access Requests (SARs) and maintain the
• SARs register.Support the IT Team in monitoring compliance with Information classification and colleagues’ use of data across the business, ensuring secure handling and alignment with HBSUK’s information classification policy
• requirements.Manage data breach incidents, including investigations, reporting, action planning and remediation, and provide training and guidance to staff to preve
• nt recurrence.Support the implementation of HBSUK’s AI Governa
• nce Framework.Support the establishment and ongoing Information Manag
• ement meeting.Support the DPO in providing training on data protection and advice and guidance t
• o HBSUK staff.Deputise as required for the Head of Data Prote

ction and DPO.
Our Co

mmitment to you
We are dedicated to promoting equality of opportunity for all employees and job applicants. In line with the Equality Act 2010, we strive to create and maintain a working environment in which everyone is able to make the best use of their skills, free from discrimination or harassment, and in which all choices are based on merit. No person is subjected to any less favourable treatment on any discriminatory grounds on the basis of age, disability, gender reassignment, marital or civil partner status, pregnancy and maternity, race, colour, nationality, ethnic or national origin, religion or belief, sex or sex

ual orientation.
If this opportunity is something which appeals to you, get in touch today, so we can ensure you have the best experience throug