Information Governance Officer
Dyddiad hysbysebu: | 23 Awst 2024 |
---|---|
Cyflog: | £35,745.00 i £38,223.00 bob blwyddyn |
Oriau: | Llawn Amser |
Dyddiad cau: | 08 Medi 2024 |
Lleoliad: | Exeter, Devon |
Gweithio o bell: | Hybrid - gweithio o bell hyd at 2 ddiwrnod yr wythnos |
Cwmni: | Devon & Somerset Fire & Rescue Service |
Math o swydd: | Dros dro |
Cyfeirnod swydd: |
Crynodeb
This is an exciting opportunity to contribute to our newly formed Information and Data Governance function of the Fire Service, supporting with compliance and how we adapt to new technologies.
Devon and Somerset Fire and Rescue Service is the largest non-metropolitan Fire and Rescue Service in England. We provide prevention, protection and response services across the counties of Devon and Somerset.
Our vision is that together, we will work to end preventable fire and rescue emergencies, creating a safer world for you and your family. Keeping people safe is what we do, and we owe our fantastic reputation to our highly skilled workforce.
About the role:
This is an exciting opportunity to join our Digital, Data and Technology department, forming part of our fast paced Information and Data Governance function.
We are looking for enthusiastic and proactive individuals, with a passion for implementing effective process and procedures and who understand information legislation. You will have an up-to-date knowledge in a variety of legal requirements (GDPR, EIR and FOI) and will be able to work within a small team to support the increase of efficiencies, whilst meeting statutory obligations. This is a great opportunity to join a well thought of team, who are key to driving improvement within the Service.
Find out more:
Key responsibilities of the Information Governance Officer role:
Act as the main point of contact for Data Protection, the Freedom of Information Act and Environmental Information queries and requests for information.
Play a central part in managing the Information Security Management System (ISMS) and Personal Information Management System (PIMS) in line with HMG Security Policy Framework and providing assurance on Service compliance.
Manage the security event reporting process, assessing risk impact v likelihood, investigate the event and escalate to the Information Governance Manager as required.
Facilitate the process of Information Risk Impact Assessments (IRIA) to help inform new projects, development and procedural change, embedding a privacy by design culture within the organisation. Complete Data Impact Assessments as and when needed and escalate unmitigated risk to the Information Governance Manager / DPO
Manage the Service's data protection and cyber security training platform. This includes preparing tailored training packages and simulated phising attacks for department or individual need, measuring user awareness of phising attacks and monitoring compliance in mandatory staff training for GDPR.
Facilitate timely and professional responses to requests for information by maintaining an effective system for recording, controlling and responding to all requests for information received by the Service under the provisions of the Freedom of Information Act, Environmental Information Regulations and the Data Protection Act / GDPR.
Implement and administer procedures adhering to statutory timescales in identifying information that is held relating to natural living persons who have the right to access, restrict and delete their personal data.
Advise on legislative exemptions and applying Public / Legitimate Interest Tests to determine whether the Service is in favour of disclosure or non-disclosure of information that is held.
What we are looking for in the ideal candidate:
Minimum of 2 years working experience within an Information Governance or compliance field.
Someone who can work independently but also as part of a team.
Experience in managing tight and conflicting deadlines.
Great interpersonal skills.
Ability to interpret complex legislation
Qualifications:
GDPR practitioner qualification
FOI and EIR practitioner qualification
Ideally educated to degree standard
How to apply:
You will be required to complete an application form and submit a document evidencing how you meet the following essential criteria from the Job Description and Person Specification.
We are not able to shortlist for interview from a CV so please answer the following questions in full, demonstrating how you meet each criteria:
Demonstrate evidence of responding to Subject Access Requests.
Demonstrate evidence of responding to FOI and EIR requests
A working knowledge of data protection and impact assessments
Delivery of GDPR training and awareness
An understanding of cyber security and demonstrable evidence of understanding how it supports GDPR.
Evidence submitted in relation to the essential criteria above will be used for shortlisting applications received.
If you have any queries or would like to speak to someone to find out more about the role, please contact Sarah Bailey via email at sbailey@dsfire.gov.uk
Closing Date: 2359hrs Sunday 8 September 2024
Aelod balch o'r cynllun cyflogwyr Hyderus o ran Anabledd