Description
Salary: £55,403 - £61,939
Working pattern: Flexible working, Full-time, Part-time
Business area: CO - Infected Blood Compensation Authority (IBCA)
Location: Newcastle-upon-Tyne, Glasgow
Job summary
The Infected Blood Compensation Authority is seeking a Data Protection Officer to assure our compliance with data protection legislation processing personal data. IBCA is responsible for paying compensation to eligible applicants, which will include those infected and affected by the infected blood scandal. As such, IBCA will be processing a wide variety of evidence, including medical records and other health data. IBCA will also be managing information flows to and from other government departments and relevant bodies to support the application process. IBCA is a recently established department, and as such requires data protection assurance as its operations develop. This is a unique opportunity to shape and implement a data protection function that provides capability to a mission-focused team.
Opportunities to move to the new Infected Blood Compensation Authority (IBCA)
At the moment all IBCA roles are hosted by Cabinet Office within the Civil Service. However, once IBCA becomes operational, it is anticipated that most of these roles will transfer to IBCA, which is a new Arms Length Body (ALB) separate from the Cabinet Office. Roles that transfer to IBCA from Cabinet Office will maintain the same or substantially the same terms and conditions of employment that are overall no less favourable. It is anticipated that employees who move from Cabinet Office to IBCA will be able to continue to participate in the Civil Service Pension arrangements with no break in their pensionable service. Roles commencing after IBCA has become operational will be with IBCA itself on similar terms and conditions. All successful candidates will receive full details of the terms and conditions of employment for their role with their formal job offer.
Please note that the mission of IBCA means that it is likely to be operational for a period of approximately 5 to 7 years. When IBCA’s work begins to wind down, IBCA employees will receive support and practical guidance to find a new role, whether in the Civil Service, another Arms Length Body (ALB), or an external employer.
Job description
The Data Protection Officer will report to the Head of Data Governance, and will sit alongside the other Data Governance workstreams, which are:
- Knowledge and Information Management
- Information Rights and Disclosure
- Data Acquisition and Quality.
The post-holder will serve as the Authority’s statutory DPO.
The role will be dynamic and fast paced, so that IBCA is able to deliver a service that is underpinned by quality, trustworthy data.
The role includes line management responsibility for one member of staff, who in turn will support the DPO with their duties.
Main Responsibilities
The successful candidate will:
- Engage with operational teams and external stakeholders to deliver a data protection framework across the organisation and support its compliance with relevant legislation.
- Continue to develop IBCA’s data protection strategy and policy.
- Lead on the assurance of Data Protection Impact Assessments when new or alternative processing is proposed. Influence the development of systems and processes to adopt a privacy by design and default approach across the organisation to meet compliance with the strategic and organisational objectives.
- Ensure compliance with the UK GDPR and other data protection laws, developing our data protection policies, processes and procedures, including managing internal data protection activities and conducting compliance reviews.
- Deliver statutory data protection requirements, including providing advice and assistance on data security incidents to support decision making decisions on breaches and whether to report them to the Information Commissioner’s Office (ICO).
- Advise on the lawfulness of using IBCA’s statutory powers.
- Provide assurance of compliance re: IBCA’s policies, processes and digital tools.
- Determine lawful bases for processing and controllership.
- Safeguard and champion privacy issues insofar as IBCA’s use of personal data.
- Create and support with data protection products and procedures.
- Manage IBCAs data protection functions, including producing and maintaining clear, accessible, user-friendly procedures, processes, forms and guidance.
- Develop and deliver data protection training programmes.
- Any other relevant data protection issues the Authority may be required to address.
The post holder will work closely with the other Data Governance leads, particularly Knowledge and Information Management, to embed consistent, compliant information governance controls across the organisation, covering for example information asset ownership and retention.
Person specification
Essential Criteria
- You should have experience of working in a data protection related role within an organisation handling sensitive personal information. You should be able to demonstrate an expert understanding of data protection legislation, and its application in practice.
- You will exhibit leadership skills in order to set a direction for the organisation and to champion the importance of data protection compliance, as well as to successfully develop your direct report.
- You should be able to articulate your decisions clearly, showing a robust supporting rationale. You should be able to think strategically and consider a range of options, and recommend the best course so as to manage organisational impact.
- You should be comfortable communicating with a range of audiences, to provide assurance to senior leaders as well as to provide guidance to operational staff. You should be able to anticipate the training needs of the organisation with reference to its activities, and design and deliver appropriate materials accordingly.
- You should have an understanding of data protection standards across government and experience of creating, implementing and embedding policies within an organisation, with a clear vision for best practice.
- You should be able to anticipate, assess and capture relevant risks, and design mitigations accordingly. You should be able to prioritise effectively while considering the big picture.
- You will be able to effectively bring constructive challenge, while working positively as part of a team both within the Data Directorate as well as across the Authority.
Desirable criteria:
- A qualification in privacy and/or data protection
Additional information:
A minimum 60% of your working time should be spent at your principal workplace. Although requirements to attend other locations for official business will also count towards this level of attendance.
Behaviours
We'll assess you against these behaviours during the selection process:
- Seeing the Big Picture
- Communicating and Influencing
- Managing a Quality Service
Technical skills
We'll assess you against these technical skills during the selection process:
- Knowledge of UK GDPR
Benefits
- Learning and development tailored to your role.
- An environment with flexible working options.
- A culture encouraging inclusion and diversity.
- A Civil Service Pension which provides an attractive pension, benefits for dependants and employer contributions of 28.97%.
- A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.
Things you need to know
Selection process details
Application process
As part of the application process you will be asked to complete a CV and personal statement. Further details around what this will entail are listed on the application form.
Please use your statement of suitability to (in no more than 1250 words) to explain how you consider your personal skills, qualities and experience provide evidence of your suitability for the role, with particular reference to the essential criteria in the person specification section of the job advert.
Should a large number of applications be received, an initial sift may be conducted using the statement of suitability. Candidates who pass the initial sift may be progressed to a full sift, or progressed straight to assessment/interview.
Selection process
Candidates who are successful at sift will then be invited to an interview.
At interview, you will be assessed against Behaviours, Technical Skills, and strength based questions.
Candidates will also be required to deliver a 5-10 minute presentation on the data protection challenges IBCA is expected to face and how you would manage these. Further details will be made available to candidates who are successful at sift.
Expected timeline (subject to change)
Sift and interview dates to be confirmed.
Interview location - Your interview will either be conducted face to face or by video. You will be notified of the location if you are selected for interview.
Reasonable Adjustment
If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should:
Contact Government Recruitment Service via recruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
Complete the ‘Assistance required’ section in the ‘Additional requirements’ page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.
Further Information
A reserve list may be held for a period of 3 months from which further appointments can be made.
Any move to IBCA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare; for further information visit the Childcare Choices website.
If successful and transferring from another Government Department a criminal record check may be carried out.
In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service/Disclosure Scotland on your behalf.
However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.
For further information on the Disclosure Scotland confidential checking service telephone: the Disclosure Scotland Helpline on 0870 609 6006 and ask to speak to the operations manager in confidence, or email Info@disclosurescotland.co.uk
Please note that this role requires SC clearance, which would normally need 5 years’ UK residency in the past 5 years. This is not an absolute requirement, but supplementary checks may be needed where individuals have not lived in the UK for that period. This may mean your security clearance (and therefore your appointment) will take longer or, in some cases, not be possible.
For further information on National Security Vetting please visit the Demystifying Vetting website.
New entrants are expected to join on the minimum of the pay band.
Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.
A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.
This role is full time only. Applicants who wish to work an alternative pattern are welcome to apply however your preferred working pattern may not be available and you should discuss this with the vacancy holder before applying.
Please note terms and conditions are attached. Please take time to read the document to determine how these may affect you.
If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.
Feedback will only be provided if you attend an interview or assessment.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
- Name :IBCA Recruitment Team
- Email :ibca.recruitment@cabinetoffice.gov.uk
Recruitment team
- Email :recruitment.grs@cabinetoffice.gov.uk
Further information
If you are not satisfied with the response you receive, then you can contact the Civil Service Commission at info@csc.gov.uk. For further information on the Recruitment Principles and bringing a complaint to the Civil Service Commission, please visit their website at: https://civilservicecommission.independent.gov.uk.
Stay connected! Follow us on LinkedIn for updates on career opportunities and more.