An exciting opportunity has arisen with a West London local authority.

The job is two-fold: Head of Information and Data Protection Officer.

The Head of Information Management job purpose is:the overall management of the use of all types of information, structured and unstructured, whether produced internally or externally, to support decision-making and business processes. Encompasses development and promotion of the strategy and policies covering the design of information structures and taxonomies, the setting of policies for the sourcing and maintenance of the data content, and the development of policies, procedures, working practices and training to promote compliance with legislation and regulations governing the management of records documents, including all aspects of holding, use and disclosure of data.

The leadership and oversight of information assurance, setting high level strategy and policy, to ensure stakeholder confidence that risk to the integrity of information in storage and transit is managed pragmatically, appropriately and in a cost-effective manner.

The overall financial management, control and stewardship of the Information division’s assets and resources used in the provision of IT services, ensuring compliance with all governance, legal and regulatory requirements.

The Data Protection Officer job purpose is:

To ensure the Council meets its obligations under the European Union (EU) General Data Protection Regulation (GDPR).  This role reports to the Chief Information Officer, Assurance, and Risk Officer Group and SLT Assurance.
To monitor compliance and data practices internally to ensure the directorates and its functions comply with the applicable requirements under the GDPR 2021 and the Data Protection Act 2022.
Responsible for signing off the data protection input and advice into the Council’s policy framework, data protection breach handling, data protection complaints (including SAR internal reviews), data protection/privacy impact assessments, staff training and internal audits.
Serves as the primary contact for supervisory authorities and individuals whose data is processed by the Council.

Qualifications - Essential:

Educated to bachelor degree level, holds a relevant professional qualification, a postgraduate qualification such as an MSc, MBA, or other appropriate information, business, engineering, scientific or industry qualification.

Hold at least one Data Protection and/or Privacy certification, such as CIPP, CIPT, ISEB, etc.

Knowledge and experience:

Demonstrates the special leadership skills needed to handle innovation and change resulting from the implementation of new information and communications technology solutions.
Possesses a high level of management skills, with emphasis on interpersonal and negotiating skills and the ability to motivate staff.

Strong knowledge of EU data privacy and data protection regulation, and a good understanding of other major privacy frameworks and evolving legislation nationally.
5 Years' experience within a compliance, legal, audit and/or risk function, with recent experience in privacy compliance.

Possesses a comprehensive understanding of the business applications of Information Systems and a wide practical knowledge of the principles of information management.

Is highly experienced in communicating with stakeholders at all levels, singly and in groups.

Demonstrates a strong awareness of the uses of IT within industry and specifically within associated organisations operating in the same sector.

Demonstrates an awareness of trends in wider industry and anticipates associated implications.

Demonstrates up to date knowledge of the organisation’s policy framework, organisational relationships, business processes, reporting procedures, and existing and planned information systems and services.

Is flexible, confident, friendly, calm, assertive and able to balance logical analysis with the emotional appeal that wins commitment or changes perceptions.

Substantial experience of work in large and complex organisation.
experience in developing policy and compliance training.
Ability to work unsupervised, exercise leadership and influence change.
Excellent writing and presentation skills.
Strong change and project management skills, including the ability to manage time well, prioritise effectively and handle multiple deadlines.
Ability to undertake large, long-term projects, develop alternative methods to complete them and implement solutions.
Ability to use independent judgement and discretion when making decisions.
Detail-oriented approach needed to recommend and implement strategic improvements on a range of data privacy and data protection issues.
Shows the ability to delegate effectively to more technical staff, whilst maintaining full management control.

Has a good overall knowledge of wide areas of information systems practice and applications.