Company Description

Catch22 exists to help build a society where everyone has a good place to live, good people around them, and a fulfilling purpose. We call these our '3Ps'.

We achieve this in two ways. Firstly, we improve lives on the frontline through delivery of public services. Secondly, we use our knowledge to change 'the system', to fix the complex web that can trap and disempower those it was set up to help. With the heart of a charity and the mindset of a business, we are uniquely placed to deliver on this challenging agenda.

Job Description

The role of Data Protection Officer is an exciting opportunity to work collaboratively across Catch22’s business units, overseeing and advising on data privacy and data protection procedures. This role will utilise systems and communication with colleagues at all levels, to effectively monitor, track and report on risks, incidents, and compliance.

This role will advise on compliance with UK and Ireland legislative requirements, including:

• UK GDPR
• Data Protection Act (2018)
• Digital Economy Act
• ePrivacy Regulations

Main Duties and Accountabilities:

• Advising on best practice legislative compliance, in line with data protection (DP) authorities.
• Providing guidance to the IT and Information Security teams and providing guidance to the Catch22 group in relation to Freedom of Information queries/requests.
• Assisting the implementation, compliance, and management, of a Data Privacy Framework, and managing, participating in, and signing off data protection projects.
• Embedding DP into all informational processes, systems, and projects, identifying risks around supplier relationships, third party data transfer, and data protection impact assessments.
• Conducting regular organisational audits and reviews of current data governance arrangements (strategy, framework, privacy notices and policies, processes, systems, contracts).
• Investigating and managing data protection incidents and breaches, ensuring that corrective actions are implemented - including root cause analysis, effective implementation of improvement opportunities and incident reporting to the ICO.
• Maintaining DP-related policies, guidelines, and materials, including a record of all ROPA’s, DPIA’s, Data Retention Schedules, Data Incidents, Subject Requests, and ISA’s.
• Managing the Data Protection Administrator and assisting with escalation procedures where required.

Please click here to view the full Job Description.

Qualifications

We are looking for applicants who can demonstrate the following experience, knowledge, and skills:

• Qualification in, or evidenced experience of dealing with, Freedom of Information requests.
• Experience in a data protection role, or signification exposure to data protection processes and requirements in the workplace.
• Strong knowledge of DPO regulatory frameworks and laws, including GDPR, DPA (2018), FOI, ePrivacy regulations, and related frameworks that apply to service delivery.
• Experience of working with Microsoft Office (Word and Excel).
• Experience of drafting sharing agreements, privacy notices, ROPA’s, DPIA’s.

Additional Information

Salary: £34,321 to £46,800 (dependent on experience)
Hours of work: Full time, 37 hours per week
Contract: Permanent
Flexibility: Hybrid working

See the benefits of working for Catch22 here.

Unless otherwise stated, interviews will be arranged as suitable candidates are identified, so early application is strongly advised.

At Catch22 we value equality, diversity and inclusion. We are wholeheartedly committed to the principle of equality of opportunity, both as an employer and as a provider of services. Diversity and Inclusion is part of what we do every day, working to deliver our vision to build a strong society where everyone has good people around them, a purpose, and a good place to live.

Catch22 is committed to rigorous safeguarding and safer recruitment practices; ensuring that every individual within the organisation has been safely and appropriately checked.