AMS PSR

On behalf of The Maritime and Coastguard Agency (DfT MCA) we are looking for a Data Protection Specialist (Inside IR35) for a 4 month contract. Remote working. 

The Data Protection team works as part of the Maritime and Coastguard Agency’s (MCA’s) Corporate Governance framework to inform the Agency’s compliance with Data Protection and Information Access Legislations.

The Data Protection Specialist will support and deputise for the Head of Data Protection, ensuring that provision of expert data protection advice to the organisation is delivered in a timely and compliant manner.

The role will support the Head of Data Protection in carrying out the delegated statutory tasks of the Department for Transport (DfT) Data Protection Officer (DPO), to facilitate and support the MCA’s compliance with Data Protection Legislations, ensuring a sensible and proportionate approach is taken to help the department do its business in a way that inspires staff and public trust and confidence.

As a Data Protection Specialist your main responsibilities will be to:

• Support the Head of Data Protection in the provision of expert advice to the MCA, its suppliers and employees on a wide range of data protection matters, ensuring a sensible and proportionate approach is taken to help the department process personal data in a lawful way that inspires staff and public trust and confidence, with the provision of timely, accurate and well-written expert advice.
• Manage the Data Protection Impact Assessment (DPIA) process, ensuring the agency undertakes DPIAs when required. Advise on and assess risks identified in Data Protection Impact Assessments, working with stakeholders to mitigate risks. Assist in the management of referrals to the DPO and Information Commissioner Office (ICO) where residual risk remains high.
• Manage the Data Protection risk register identifying data protection compliance risks alongside other business risks. Escalating these risks to the Head of Data Protection, the DPO and MCA Senior Information Responsible Officer (SIRO) in accordance with internal risk escalation procedures.
• Maintain the record of processing activities (ROPA) log, ensuring capture and record of associated privacy notices, Data Protection Impact Assessments (DPIAs), Data Sharing Agreements and compliance activities that relate to the processing activity.
• Assist the Head of Data Protection in responding to formal complaints received from data subjects, managing the logging and recording of complaints processed and assisting with complaint investigations.
• Review and maintain the MCA’s Privacy Notices, ensuring data subjects are accurately informed about MCA processing and the rights available to them. Ensuring relevant and accessible Privacy Notices are in place where required.
• Manage and maintain the MCA’s data protection policies and procedures, ensuring they are regularly updated to reflect changes in legislation. Provide specialist data protection input into Agency-wide policies, in particular Information Security Policies.

Essential:

• Experience in data protection, successfully obtained Data Protection Practitioners Certificate, or have sufficient comparable prior experience and knowledge to undertake this soon after starting the role.
• Experience in information security principals and standards and be able to apply this alongside data protection legislation to advise data and security professionals in developing data management standards and processes.
• A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
• Excellent communication skills, both verbal and written, highly skilled in the delivery and absorption of information with colleagues at all levels.
• Excellent presentation and public speaking ability, particularly with regard to delivery of training and reporting to senior executives.
• A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
• Understanding of how public sector organisations work (governance) and the application of the information access and data protection regimes to public sector bodies, including understanding of records management regulations and best practices.
• Experience in risk management methodologies

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident 

As a member of the Disability Confident Scheme, DfT guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

DfT guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".