Head of Data Protection & Information Management
Location: Swansea, Bristol, Birmingham (Garretts Green), Nottingham, Yeading (Hayes), Oldham (Chadderton), Leeds, Newcastle
Salary: £57,515 per annum
Vacancy Type: Permanent, Full Time (37 hours per week), Part Time (30 hours per week)
Closing Date: Monday 6th July 2026
The Head of Data Protection and Information Management role is part of a Department-wide Data Protection Unit led by the DfT Departmental Data Protection Officer and reports locally to the DVSA Chief Data & Security Officer. The role carries out delegated statutory tasks of the Departmental Data Protection Officer in accordance with the DfT DPO Governance Framework and serves as the principal point of contact for the ICO and Data Subjects within the DfT controllership.
The position manages the information and records management function within the Government Knowledge and Information (KIM) Profession, ensuring that electronic and physical records are compliant with GDPR and other regulations. The team works with the DVSA Corporate Reputation team to meet statutory obligations arising from GDPR and Freedom of Information legislation, including the assurance of processes and leading internal reviews or complaints under data protection.
Benefits
- Employer pension contribution of 28.97% of your salary.
- 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days), plus 8 bank holidays and a privilege day for the King’s birthday.
- Flexible working options to encourage a balanced work‑life.
- Read more in the Benefits section below.
Job Description
Your responsibilities will include, but are not limited to:
- Act as the Data Protection Manager for the DVSA, carrying out the statutory tasks delegated to the role and DVSA by the Department’s DPO (as set out in the DfT Data Protection Governance Policy).
- Lead the records management function ensuring alignment with DfT and wider Government.
- Provide assurance to the Digital & Technology Leadership Team that the organisation’s systems are designed in accordance with data protection policies and regulations.
- Lead FOI internal reviews, ensuring our response is fair and robust, and when necessary challenge senior managers on decisions to disclose or withhold.
Person Specification
Essential Qualifications
- Industry-recognised practitioner-level qualification in data protection.
- Qualification in FOI or a security qualification such as CISMP or ISO27001; if not held, willingness to acquire within 9 months of joining.
Experience
- History of being involved in incident management and part of a wider incident management team.
- History of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
- Experience of information and records management, advising on Freedom of Information legislation and supporting the business with training.
- Experience in assessing and improving compliance and reporting on this to all levels.
- Experience of risk management and working with cyber security colleagues.
#J-18808-Ljbffr…