Information Assurance and Data Protection Lead

The Ministry of Defence (MOD) is delivering an ambitious Defence Reform agenda to meet a new era of global threat, implementing the Strategic Defence Review through a clearer, simpler, and more joined-up operating model.

This role sits within the Directorate for Business Operations in the Ministry of Defence (MOD) Department of State (DoS), as part of the Director General Finance team, which is responsible for the Security, Safety, Business Resilience, Technology and Accommodation of MOD Main Building as MOD’s strategic headquarters.

The successful candidate will be an SEO Information Assurance/Data Protection (IA/DP) Lead, based in MOD Main Building. The role will support the Grade 7 Assistant Head to develop and implement IA and DP strategies for DoS and work with DG areas to promote the protection of information and develop a positive Data Protection culture.

Key responsibilities:

• Line manage a team of 2 HEOs (Information Assurance Risk Advisor and Data Protection Advisor)
• Promote IA and DP compliance across DoS, monitoring activities to ensure legislative and statutory obligations are adhered to
• Advise Local Data Protection Advisors (LDPAs) to ensure the processing of personal data is compliant
• Provide advice and guidance on the creation of Data Sharing Agreements and MOUs where personal data is shared outside of commercial arrangements
• Support the PDPA in providing regular progress reports to senior management
• Assist with personal data incident investigations, working with security colleagues
• Implement the DoS Information Directive, as well as support the development of DoS KIM policies
• Develop DoS policies relating to IA, Information Risk Management and Data Protection
• Develop an Information Asset Register to capture and manage DoS critical information assets
• Develop an effective Information Risk Management framework across DoS, including an Information Risk Register

The post holder will be an experienced, energetic, self-starter, with the confidence and ability to engage with all staff regardless of grade or rank. Attributes such as strong analytical, communication, delivery and interpersonal skills will be critical, as will a background in working in a KIM environment.

Essential Skills:

• 2 years’ experience in an Information Assurance or Data Protection role
• Willing to become a Certified Data Protection Practitioner (GDPR) within 6 months of being in post

Desirable Skills:

• Willing to undertake the ISO 27001 Certified Lead Auditor training

Benefits:

• Salary of £46,040 per year
• Contribution towards being a member of the Civil Service Defined Benefit Pension scheme (£13,337)
• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%