Information Governance & Data Protection Officer

Updated: about 1 month ago
Location: Edinburgh, SCOTLAND
Job Type: FullTime
Deadline: 01 Apr 2024

Children’s Hearings Scotland (CHS) are looking for a highly skilled and proactive Data Protection Officer and Information Governance Practitioner to join our Team and help us to refine and continuously improve our processes and procedures.

As Information Governance & Data Protection Officer, you will operationally lead CHS in achieving best practice in information governance and data protection, as well as supporting the organisation in meeting its statutory IG obligations, in particular those outlined in the GDPR, DPA, FOISA, and PRSA by acting as Data Protection Officer. You will enhance our existing processes and polices ensuring compliance and best practice is applied across the organisation.  You will have the opportunity to shape the way we approach records management and apply data protection principles across all of our projects and process improvement initiatives.

If you think that you can help to shape and improve our practices and build on our strong governance culture, then this might be just the role for you.

Key Responsibilities:

  • Lead on Data Protection & governance issues which includes regular reporting and presentation to the Board, working with the SIRO, and acting main point of contact for Data Protection for CHS.
  • Ensure ongoing compliance with IG, records and data protection legislation, providing on-going evidence of compliance with statutory requirements in the PRSA and CHS’ Records Management Plan.
  • Lead on Data Protection Impact Assessments process, offering advice and proactive solutions to queries.
  • Play a key role in corporate governance by ensuring that projects, including digital developments,  have data protection by design and default built in.
  • Manage information security incident resolution including recording, investigating and reporting of incidents and identifying vulnerabilities in our systems and practices.
  • Draft responses to requests for information, and leading on responding to requests submitted under Freedom of Information (Scotland) Act, 2002 and Environmental Information (Scotland) Regulations 2004.
  • Managing requests submitted under Data Protection legislation, such as Subject Access Requests.
  • Manage statutory reporting to regulators, principally the Information Commissioner’s Office and the Scottish Information Commissioner.
  • Work with colleagues to ensure a risk-based approach to the application of data protection principles across all areas of the business and lead on auditing CHS’s compliance with IG policies and practice.

Life at CHS

Our 2,500 volunteer Panel Members take part in children’s hearings, making decisions with and for infants, children and young people. Our organisation also supports a network of volunteer Area Support Teams who support Panel Members in their local communities.

As an organisation that works within the children’s hearings system, we are passionate about making  a positive contribution to improving outcomes for Scotland’s infants, children and young people.

You can read more about our core values HERE . We also offer a generous benefits package from hybrid working, flexi hours and a fantastic pension scheme – see our full benefits summary HERE .

How do I apply?

For more details and to apply, please download the application pack from our website which includes a full job description and a person specification.

Please note CVs are not accepted.

For an informal and confidential discussion on the role or about any adjustments you might need, please email [email protected]  

Closing Date:  Monday 1st April 2024 (midnight)

It is anticipated interviews will be held week commencing 8th April 2024

After the closing date, this role profile won’t be available on our website, please save a copy when you apply. 



Similar Positions