Senior Data Protection And Information Governance Manager

Liverpool School of Tropical Medicine (LSTM) is a globally recognised centre of excellence, specialising in research that impacts global health. Recently named Business of the Year by Liverpool Chamber of Commerce, and celebrating our 125^th anniversary this year, there has never been a more exciting time to join our organisation.

We have created an exciting opportunity for a Senior DataProtection and Information Governance Manager to lead LSTM’s approach to Information Governance compliance, including Data Protection, freedom of information and corporate records management.

As postholder, you will develop strategy, policy, provide specialist advice and manage operational compliance, overseeing responses to statutory information requests, approving Data Protection Impact Assessments, drafting data sharing/processing agreements, and providing expert advice on complex information compliance issues. Additional responsibilities will include managing information compliance risks, providing staff training and implementing compliance initiatives.

Fulfilling the statutory duties of a Data Protection Officer (DPO), you will report to the Director of Legal and Governance, with direct access to our most senior Director / Head of Institution. You will provide line management for the Information Governance & Records Management Office and develop this emerging specialist service.

Your understanding of complex operations within a global specialist research & higher education environment will enable you to work with a range of academic and professional service colleagues throughout LSTM, including senior organisation stakeholders, leaders, and our Board of Trustees.

Your responsibilities will include:

Organisational leadership for Data Protection and Freedom of Information

• Leading the development and implementation of an effective monitoring framework consisting of policies, procedures, processes, reporting, guidance, and metrics.
• Acting as LSTM’s Group statutory Data Protection Officer and Freedom of Information Officer, and being first point of contact for supervising authorities, including the Information Commissioner’s Office.
• Providing expert advice and guidance to LSTM’s Executive, professional services, Academic staff, students, partners, and other relevant stakeholders on complex issues to ensure compliance with privacy requirements.
• Undertaking Privacy Impact Assessments where appropriate on systems processing personal data and ensuring all new systems implement privacy by design and default.

Information Governance and Records Management

• Leading the development, operation and implementation of policy management, records retention, organisational wide information/records audits, and any other relevant projects.
• Working with the Chief Operations Officer and other Senior Managers to surface, align, and delineate Information Governance and security risk.
• Leading and being an active member of LSTM’s Information Governance Group, including Chairing, providing items to be included on the group’s meeting agendas and producing comprehensive reports and briefings.
• Developing and maintaining accurate, comprehensive, and authoritative records of all information management, data processing activities undertaken by, or on behalf of LSTM, and leading the development of corporate record retention schedules.

Please refer to the job description for full details on role responsibilities.

Qualifications and skills required:

• Qualified to degree level in a relevant field or equivalent experience.
• Evidence of continued professional development and acquisition of new skills and knowledge
• Extensive knowledge and application of the Data Protection Act 2018, the UK General Data Protection Regulations, Freedom of Information Legislation, Information Security Standards and ICO Guidance.
• Extensive practical experience of Data Protection compliance operating at a senior level preferably within the higher education, research, NHS, or business sector, or within an international organisation.
• Experience of records management principles and processes gained through maintaining complex information compliance records accurately.
• Knowledge of data sharing agreements, privacy, consent, and data management issues, including trans- border data flows.

Application Process: To apply for the position please follow the apply link and upload your CV and covering letter.

Due to the volume of applications, we receive, we may close our vacancies early. It is therefore advisable to apply as early as possible if you would like to be considered for a role.

Please note that the successful candidate will be required to undergo an enhanced DBS and/or other international criminal record check prior to appointment and at regular points during employment. The outcome must be satisfactory to LSTM, as the duties of this post will involve direct and/or indirect contact with vulnerable adults and/or children.

Inclusion is central to our values at LSTM

We seek to attract and recruit people who reflect the diversity across our communities, regardless of sexual orientation, gender identity, ethnicity, nationality, faith or belief, social background, age and disability. LSTM selects candidates based on skills, qualifications, and experience.

We welcome conversations about flexible working; and applications from those returning to employment after a break from their careers.

About LSTM

Founded in 1898 and the oldest of its kind in the world, the Liverpool School of Tropical Medicine (LSTM) is an internationally recognised centre of excellence for teaching and research in tropical diseases. Through the creation of effective links with governments, NGOs, private organisations, and global institutions and by responding to the health needs of communities, LSTM aims to promote improved health, particularly for people of the less developed/resource poorest countries in the tropics and sub-tropics.