Data Protection Officer

The Institution of Engineering & Technology ,
Stevenage, Hertfordshire
Job Type: Full-time
Salary: £45,000 per annum

Overview

Data Protection Officer Circa £45,000 to £50,000 per annum Stevenage, Hertfordshire We are looking for a Data Protection Officer to join the IET family We are the IET and we inspire, inform and influence the global engineering community to engineer a better world. As a diverse home across engineering and technology, we share knowledge that helps make better sense of the world in order to solve the challenges that matter. It’s why we are uniquely placed to champion engineering. As our Data Protection Officer, you will demonstrate your excellent communication and stakeholder management skills, providing expert advice and guidance to ensure the IET meets and continues to meet national and international legislation, regulations and best practice in data protection. You will also be really key in ensuring we meet up to date compliance obligations in PCI-DSS (Payment Card Industry Data Security Standard). You will look after the drafting and updating of any IET policies and procedures relating to these areas, balancing compliance with achieving business objectives and goals. This role will have ample opportunity to work across a diverse set of business teams and would suit someone who likes variety from one day to the next Take a look at the day to day responsibilities and key skills below. If you feel you have experience in a number of these areas please send us your CV for consideration. We are also open to discussing flexible ways of working, including reduced hours and working in an agile way. If you are keen to join the IET Family, we look forward to hearing from you soon. Day to Day Responsibilities (summary) Be the subject matter expert and compliance lead in Data Protection and Privacy and Electronic Communications Regulations. Lead and manage the IET data protection strategy framework, updating and refreshing when appropriate. Assess and advise on the impact of legislation, standards and regulation on new business initiatives, contracts and projects, proposing solutions. To advise on and monitor data protection impact assessments. Provide regulatory advice, guidance and propose solutions in relation to IET’s products, operations and services. Proactively initiate, develop, maintain and revise the compliance of relevant operational policies, processes and procedures, and manage them in line with current and new regulations and business needs. Lead and manage the organisation’s data protection, PCI-DSS and other relevant data compliance communication, training and awareness activities, embedding procedures and processes, updating and refreshing where appropriate. Provide impartial and independent advice, support and guidance to the business on all privacy queries. Keep up to date on relevant legislation, standards and regulatory related issues and provide strategic advice to the directors and where necessary the Trustees on the implications of new and changes to legislation. Alert the business to any risks that might arise with regard to personal data. Manage and respond to incidents and data breaches and analyse themes and trends and drive continuous improvement from the outcomes. Escalate issues to senior management where appropriate. Build relationships with stakeholders (internal and external) by communicating changes, providing advice support, training and solutions on relevant legislation, standards and regulatory issues. Drive and embed a culture within the organization where data protection is a key element and integral to all new initiatives across the business. Act as the public face of data protection for the organization. Liaise with the Information Commissioner’s Office (ICO) on data protection matters where appropriate. Key Skills Demonstrable experience and expert knowledge of data protection law. Data protection practitioner qualifications. Demonstrable experience of working within a compliance lead / management role. Excellent communication skills at all levels of the business including written, verbal and presentation skills. Analytical and investigative skills in order to identify areas of non-compliance to determine root causes, key risks and challenges to the IET’s businesses, propose changes and identify opportunities. Ability to lead, persuade and influence attitudes and behaviours. Ability to absorb new information, interpret and apply to the IET’s situation and communicate at senior levels. Strong team working skills Commercial awareness Project management skills Ability to adapt within a changing environment and work effectively with multiple stakeholders from a wide business background. Ability to create and embed compliance training strategies into businesses. A good understanding of information security principles and the legal framework for compliance management. The IET is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.