About the job

Job summary

Digital, Data and Technology (DDaT): We are transforming DCMS to meet the demands of an agile, delivery-focused department leading on some of the highest priority work for the government’s agenda to drive growth, enrich lives and level-up society. 

The role is based within the Technology, Assurance, Cyber Security & Assurance Team  (TACT) that forms part of wider corporate services included in the Digital, Data and Technology (DDaT) directorate. TACT is managed by DCMS’s Chief Technology Officer who is responsible for the following functions: Technology Services (IT Operations), Architecture & DevOps, Cyber Security and the Operational Data Protection Team (ODPT). 

These are exciting times at DCMS. As part of the small ODPT, the successful applicant will play a key role in supporting the Data Protection Manager in delivering our core function of promoting compliance with the Data Protection Act (DPA) 2018, the UK General Data Protection Regulation (GDPR)  and Privacy and Electronic Communications Regulations (PECR) 2003 across policies, projects, processes and services involving personal data.  

ODPT works closely with the DCMS Data Protection Officer to help ensure good data governance. 

Further information about the role can be found in the candidate pack attached below

Job description

This role will have exposure to all functions and directorates within DCMS. You will be working with departments, enabling internal implementation of departmental policies and shaping future strategy and innovation, helping business groups across DCMS to manage and use personal data in a manner compatible with the law. You will be the first point of contact for data protection related enquiries and will develop strong working relationships with key stakeholders. You will do this through the provision of bespoke advice, guidance and training in an economically heavyweight, data-driven, inclusive and delivery-focused department.  

Responsibilities of the role include:

• Successfully handling information rights requests (including SARs) within legal deadlines, collaborating with stakeholders as appropriate to achieve this

• Advising the department on handling personal data by:

○ Attending regular team & project meetings to advise on data protection and privacy by design considerations including conducting data protection impact assessments

○ Advising on data mapping, data sharing and processing activities & agreements, wording of privacy notices, consents, surveys, etc.

○ Working closely with IT, Knowledge and Information Management and Cyber Security colleagues to implement best practice in personal data management and handling

○ Responding to routine operational data protection enquiries

• Supporting the Data Protection Manager in the:

○ maintenance and publication of the Personal Information Charter

○ keeping data protection guidance, self-help tools and evidence hubs up to date

○ delivery of data protection training & awareness across the organisation

○ production of monthly and annual reporting, and keeping and maintaining record of dataprotection compliance activities

• Maintaining and completing casework, DPIA, & subject access logs, web compliance (cookies), etc.
• Providing the Information Asset Owners with support with their responsibilities in the maintenance of RoPAs
• Supporting the Data Protection Officer with internal compliance audits
• Undertaking any other duties as may reasonably be required of you in the post

Person specification

The ideal candidate would have the following key skills and experience:

Essential requirements:

Successful applicants will need to evidence the following essential requirements for this post:

• A current working knowledge, experience and understanding of UK & EU GDPR, DPA 2018 and PECR, particularly:
  - Responding to information rights requests, (particularly Subject Access Requests) from individuals
  - Existing working practices within central or local government, including risk management, ROPA, data privacy impact assessment governance & compliance framework
  
  
• Experience of engaging with stakeholders to resolve business issues and ensure effective & efficient delivery of services
  
  
• In a comparable business environment, experience of providing evidence based, risk balanced advice to seniors, presenting complex considerations in clear and non-technical terms
  
  
• Proven ability to adapt to changing priorities whilst maintaining focus in fast paced environments

Desirable skills:

• Recognised qualifications in Data Protection, UK GDPR:

- Qualified to CIPP/E or Certified Data Protection Practitioner (PC.dp) or BCS Practitioner Certificate in Data Protection (DPA2018 & GDPR); or

- equivalent or evidence that you are working towards such a qualification; or

- is able to demonstrate technical expertise that is equivalent to the qualifications

• Experience of:

- Completing cookie audits and managing PECR compliance

- Managing a training programme

We are running an information session where prospective applicants can find out more about the role. This will be hosted by the vacancy holder - Elizabeth Todd, Data Protection Manager, and will take place on: Tuesday 25th June, 10-11am.

The session will be an opportunity to hear more about the role, the team and wider directorate and the department. It will also be an opportunity for you to ask any questions.

Please register your interest by filling out this form and you will be sent an invitation. 

Please note that the session will not focus on the DCMS recruitment process - please direct any queries that you have on this topic (timelines, reasonable adjustments, onboarding etc) to recruitment.team@dcms.gov.uk

Benefits

Alongside your salary of £37,670, Department for Culture, Media and Sport contributes £10,170 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths, Experience and Technical skills.

To apply for this post, please send us the following documents no later than Thursday 4th July 2024 at 23:55 via the CS Jobs portal:

• A CV setting out your career history, with key responsibilities and achievements. Please ensure you provide employment history that relates to the essential and desirable criteria, and that any gaps in employment history within the last 2 years are explained. The CV should not exceed more than 3 x A4 pages and you should insert your CV into the "Job History" section on Civil Service Jobs on the Civil Service Jobs application form.
• A Statement of Suitability (max 750 words) explaining how you consider your personal skills, qualities and experience provide evidence of your suitability for the role in reference to the essential requirements highlighted. You may also choose to reference the desirable skills listed.

For the shortlist, we will assess your experience and select applicants demonstrating the best fit for the role by considering the evidence provided in your application.

In the event of a large number of applicants, an initial sift will be conducted on the statement of suitability. Those who are successful in the initial sift will then be scored on all elements of the application.

For support in writing your application and interviewing, please refer to the ‘Application and Interview Guidance’ document attached to the job advert.

The interview process will assess behaviours, strengths and will assess technical ability.

The behaviours to be tested at interview are:

• Communicating and influencing
• Delivering at pace
• Changing and improving

You will not be made aware of the strengths being assessed prior to your interview. 

You will be tested against the following technical skills framework. Please see the document attached below for further information on the technical skills framework.

• Advice and Guidance: AG01: Drafting policy and guidance, AG03 , Providing advice and
  guidance: DPA
  
  
• Information and Risk: IR01 , Identifying and managing information risk: Data Protection
  
  
• Policy and Legislation: PL01 , Working with the Data Protection Act 2018 (DPA), PL04 ,
  Working with the Freedom of Information Act 2000 (FOIA) and Freedom of Information
  (Scotland) Act 2002 (FOISA), PL05 , Working with the Privacy and Electronic
  Communications (EC Directive) Regulations 2003 (PECR), PL07 , Working with the UK
  General Data Protection Regulation 2018 (UK GDPR)
  
  
• Processes: P01 , Carrying out casework on Data Protection (including SARs and
  complaints)

Your interview will take place remotely via GoogleMeets.

For indicative sift and interview dates please refer to the attached Candidate Information Pack.

Further Information

This role is full time only. Applicants who wish to work an alternative pattern are welcome to apply however your preferred working pattern may not be available and you should discuss this with the vacancy holder before applying.

For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting

A reserve list may be held for a period of 6 months from which further appointments can be made.

Any move to Department for Culture, Media and Sport from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk   

New entrants are expected to join on the minimum of the pay band.

DCMS has a London and a National pay scale. For more information on this, including the circumstances in which each pay scale will apply, please see the ‘Information for Applicants’ document.

If successful and transferring from another Government Department a criminal record check may be carried out. 

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading. 

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. 

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

Reasonable Adjustment

We are committed to supporting candidates so they can perform at their best throughout the recruitment process. This includes making reasonable adjustments to our process.

In order to request an adjustment, please:

Complete the ‘Assistance required’ section on the ‘Additional requirements’ page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or a verbal test rather than a written one. 

Alternatively, contact the Government Recruitment Service via dcmsrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Accessibility

If you are experiencing accessibility difficulties with any of the attachments, please contact us. Contact details can be found in the 'contact point for applicants' section of the job advert.

Feedback

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window). People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window). The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.