Data Protection and Information Governance Lead

Are you an experienced data protection and information governance expert seeking a new challenge We have an exciting opportunity for you to join our team as the Data Protection and Information Governance Lead for Social Security Scotland and take the next step in your career.

Social Security Scotland an Executive Agency of the Scottish Government is undertaking the largest and most complex IT and digital change programme since devolution. With a lifetime budget of over 300m Social Security Scotland is delivering a social security system that will support the people of Scotland for decades to come.

We aim to develop within Social Security Scotland a positive and inclusive culture which supports our people to flourish by embedding a working environment where we all treat each other with dignity and respect and recognise each others contributions.

In this pivotal role you will shape the data protection landscape across the organisation while leading and mentoring three specialised teams. We are seeking candidates with indepth domain knowledge and a proven track record of effectively managing large diverse teams in complex environments.

In this role strong leadership skills are essential to not only inspire and motivate your teams but also to navigate and manage team dynamics effectively. You will be required to implement a firm yet supportive approach that fosters collaboration and cohesion. By promoting open communication and addressing challenges headon you will cultivate a constructive working environment where differing perspectives are valued and harnessed ultimately driving the teams to work cohesively and achieve shared goals in data protection and information governance.

You will manage and lead three teams setting direction and policy for these specialist areas and ensuring their effectiveness and performance for the organisation.

Data Protection (Corporate & Client) Team Responsibilities:
Ensure compliance with legal data protection requirements.
Promote privacy practices assess risks and advise on contractual agreements.
Develop and refine data protection policies and procedures.
Provide staff training on data protection.
Manage and resolve data breaches.
Facilitate individuals information rights.
Monitor performance and compliance for the Executive Team.
Foster a culture of continuous improvement in data protection.

Corporate Records and Information Governance Team Responsibilities:
Implement the Records Management Plan per Keeper of the Records Scotland guidelines.
Manage the electronic records and document management system.
Respond to Freedom of Information (Scotland) Act requests for legal compliance.
Facilitate proactive public disclosure of information.
Address inquiries related to UK General Data Protection Regulation within statutory timelines.
Process disclosure requests from thirdparty authorities in accordance with legal requirements.
Coordinate information governance processes to ensure policy adherence.

Role Responsibilities:
Strategic Leadership: Lead the development and implementation of data protection and information governance policies processes and services. Collaborate with senior leadership including the Chief Data Officer and stakeholders to ensure compliance with statutory requirements and best practices.

Team Management: Manage and direct three teams focused on corporate and client data protection and records management. Set clear goals promote a culture of continuous improvement and enhance team effectiveness.

Data Protection Oversight: Serve as the Data Protection Officer for Social Security Scotland. Guide senior leadership and work with the Scottish Government Data Protection Officer to ensure adherence to legal requirements address data breaches and promote privacy within all data processing activities.

Partnership Development: Build and maintain strong data protection and information governance partnerships with the Scottish Government UK Ministerial Departments and Local Government ensuring collaborative compliance efforts.

Training and Awareness: Develop and deliver training for staff at all levels to foster a privacyfocused culture throughout the organisation.

Compliance Monitoring: Evaluate organisational compliance with data protection laws and governance standards ensuring performance metrics are met and communicated to executive leadership.