About the role

Data Protection Manager at Social Security Scotland overseeing data protection practices and governance. Leading DPIAs, data sharing agreements, and building stakeholder relationships for compliance and best practices.

Responsibilities

Lead the implementation and delivery of our data protection by design principles and data sharing strategies.
Oversee the production, maintenance, and review of Data Protection Impact Assessments (DPIAs), ensuring they are comprehensive and up-to-date.
Manage the creation, review, and maintenance of data sharing agreements with external partners such as DWP and HMRC.
Ensure oversight of the data protection governance workload and backlog, aligning priority tasks with organisational objectives to effectively manage resources and mitigate risks.
Provide expert advice on complex data protection issues across Social Security Scotland, particularly to senior staff.
Support the development of policies and best practices in data protection and information governance.
Build and maintain strong relationships with key stakeholders across the organisation.
Advise on data protection and information risk, escalating issues to the Data Protection Officer and senior leadership as appropriate.
Support external data sharing requests received from other departments, working closely with the wider Data Services branch.
Ensure contractual arrangements with suppliers meet data protection standards and requirements.
Line manage at least two Senior Data Protection Practitioners, providing guidance, support, and professional development opportunities.
Lead on issues of particular complexity and sensitivity, using your knowledge and experience to build team capability.

You must have, or be willing to work towards, an approved accreditation such as the British Computer Society Data Protection Practitioner Certificate or relevant equivalent.
Proven experience in leading or supporting the completion of Data Protection Impact Assessments (DPIAs) and managing data sharing agreements with external partners. Ability to oversee their production, maintenance, and review processes to ensure compliance and mitigate risks.
Demonstrable experience in building and maintaining relationships with internal and external stakeholders. Skilled in advising on data protection and information risks, supporting external data sharing requests, and ensuring contractual arrangements with suppliers meet data protection standards.
Experience of line managing or leading teams, with the ability to support, develop, and motivate staff. Proven track record of leading on complex or sensitive issues, providing guidance and professional development to team members, and fostering a collaborative team environment.