Data Protection Officer
Cabinet Office

Reference number: 371225

About the job
The Infected Blood Compensation Authority seeks a Data Protection Officer to assure our compliance with data protection legislation when processing personal data. IBCA is responsible for paying compensation to eligible applicants, which will include those infected and affected by the infected blood scandal. As such, IBCA will be administering a wide variety of evidence, such as medical records and other health data. IBCA will also be managing information flows to and from other government departments and relevant bodies to support the application process. IBCA is a new department, and as such requires data protection assurance at all levels. This is a unique opportunity to shape and implement a data protection function that provides capability to a mission-focussed team.

Job description
The Data Protection Officer will report to the Head of Data Governance, and will sit within IBCA’s Data Directorate alongside other data-related functions. The post-holder will serve as the Authority’s statutory DPO from the time that IBCA becomes an independent public authority. 

The role will be dynamic and fast paced, so that IBCA is able to deliver a digital service that is underpinned by quality, trustworthy data.

The role includes line management responsibility for one member of staff, who in turn will support the DPO with their duties.

The successful candidate will lead on providing input and assurance and deliver advice and guidance regarding:

• data protection impact assessments, data sharing
• lawful bases for processing and controllership
• data subject rights and privacy issues,
• relevant policy and procedure, training needs,

as well as any other relevant data protection issues the Authority may be required to address. 

Opportunities to move to the new Infected Blood Compensation Authority (IBCA)

At the moment all IBCA roles are hosted by Cabinet Office within the Civil Service. However, once IBCA becomes operational, it is anticipated that these roles may transfer to IBCA, which is a new public body separate from the Cabinet Office and independent of the Civil Service. Roles that transfer to IBCA from Cabinet Office will maintain the same or substantially the same terms and conditions of employment that are overall no less favourable and it is anticipated that employees who move from Cabinet Office to IBCA will be able to continue to participate in the Civil Service Pension arrangements with no break in their pensionable service.

Person specification
You should have experience of working in a data protection related role within an organisation handling sensitive personal information. You should be able to demonstrate an expert understanding of data protection legislation, and its application in practice.

You will exhibit leadership skills in order to set a direction for the organisation and to champion the importance of data protection compliance, as well as to successfully develop your direct report.

You should be able to articulate your decisions clearly, showing a robust supporting rationale. You should be able to think strategically and consider a range of options, and recommend the best course so as to manage organisational impact. 

You should be comfortable communicating with a range of audiences, to provide assurance to senior leaders as well as to provide guidance to operational staff. You should be able to anticipate the training needs of the organisation with reference to its activities, and design and deliver appropriate materials accordingly. 

You should have an understanding of data protection standards across government and experience of creating, implementing and embedding policies within an organisation, with a clear vision for best practice. 

You should be able to anticipate, assess and capture relevant risks, and design mitigations accordingly. You should be able to prioritise effectively while considering the big picture. 

You will be able to effectively bring constructive challenge, while working positively as part of a team both within the Data Directorate as well as across the Authority.

For further information and to apply please click the Apply button.

Apply before 11:55 pm on Thursday 10th October 2024.