Job Description
A Housing Association is currently looking for a Data Compliance Officer on a temporary basis for about 4 months
Key responsibilities are as follows
Investigating and responding to security incidents, data breaches and data protection related complaints
Responding to subject access requests, within agreed timelines
First point of contact for business for advice and assistance on all data protection matters including DPIAs, action plans, data sharing agreements, information asset register etc
Review, develop and prepare guidance for staff on all data protection matters on a regular basis
Embedding GDPR compliance by leading and supporting wider business through regular meetings, preparing and delivering training on data protection and GDPR requirements including refresher training and specific training as requested by the business
Work with the wider business to develop record keeping processes and systems in line with GDPR/Best Practice requirements
Advice and assist the business in all data protection matters, including retention schedules, data sharing agreements, PIAs, information asset register etc
Work closely with the Information Data Owners to support them in delivering data protection obligations, policies and best practice. With business, close working to review and update action plans, monitoring progress, identifying issues and supporting delivery of them
Undertaking audit risks, identifying issues, agreeing actions and sharing learning and good practice across the business Maintenance of logs and registers
Maintain the information security breach and subject access request logs
Collating of key data protection compliance statistics and performance metrics to the direction of the Senior Data Compliance Officer/Data Protection Officer
Contribute to reports for senior management as required
PAYE 24.40 Umbrella 32.47 Hybrid role
Essential requirements
Must have worked in a similar role before preferably in housing
Good knowledge of data protection including GDPR, Data Protection Act 2018 and related legislation e.g., Privacy of electronic communications
Experience of working in a customer facing organisation of large and complex nature
Experience of investigation and resolution of problems
Experience of providing reports and internal communications for a range of audiences including senior management
Experience of working in a data protection function
Must be immediately available or on short notice.
