Data Protection Assessment and Compliance Manager

Job Objectives

Main Duties and Responsibilities

•Assess and implement appropriate data sharing arrangements with third parties to govern the sharing of personal data.

•Complete desktop and in-person assessments of third party technical and organisational measures to ensure appropriate security of Tusla personal data and to mitigate any data protection risks identified.

•Complete Data Protection Impact Assessments and other privacy assessments.

•Complete the compilation of monthly, quarterly and yearly data protection compliance metrics.

Team Effectiveness

Escalate any high risk items to the relevant General Manager or designated deputy.

•As required, deputise for the Data Protection Assessment and Compliance Manager.

•Supervise, allocate and oversee the work of assigned staff.

•Build relationships with relevant internal and external stakeholders.

Stakeholder Engagement

•Support data protection training and awareness events through the provision of SME content.

•Develop, format, and edit high-impact presentations for senior leadership meetings.

•Support the maintenance of Tusla’s Record of Data Processing Activities to ensure it is comprehensive, current and accurate.

Health & Safety

•Comply with and contribute to the development of policies, procedures, guidelines and safe professional practice and adhere to relevant legislation, regulations and standards.

•Have a working knowledge of the Health Information and Quality Authority (HIQA) Standards as they apply to the service for example National Standards for Child Protection and Care and comply with associated Tusla – Child and Family Agency protocols for implementing and maintaining these standards as appropriate to the role.

•To support, promote and actively participate in sustainable energy, water and waste initiatives to create a more sustainable, low carbon and efficient health service.

The above Job Description is not intended to be a comprehensive list of all duties involved and consequently, the post holder may be required to perform other duties as appropriate to the post which may be assigned to him/her from time to time and to contribute to the development of the post while in office.

Skills Requirement

Applicants must by the closing date of application have the following:

•Have a third level qualification on the National Framework of Qualifications in Ireland (or equivalent in another jurisdiction) in a relevant discipline, and / or have a formal Data Protection certification / qualification

AND

•2 years experience of risk based compliance frameworks, including control design risk identification and mitigation implementation, preferably in the area of data protection or similar.

AND

•Provide an example that demonstrates experience of one of the following:

oKnowledge of the law and practice of the General Data Protection Regulation and the Irish Data Protection Act 2018.

oExperience of compliance reporting processes and communications preferably in the area of data protection

AND

•Experience of managing and working collaboratively cross functionally with multiple internal and external stakeholders, as relevant to this role

AND

•Have the requisite knowledge and ability (including a high standard of suitability and management ability) for the proper discharge of the duties of the office

Health

A candidate for and any person holding the office must be fully competent and capable of undertaking the duties attached to the office and be in a state of health such as would indicate a reasonable prospect of ability to render regular and efficient service.

Character

Each candidate for and any person holding the office must be of good character

CLICK THE APPLY BUTTON TO GO TO THEIR CAREERS PAGE WHERE YOU CAN CHECK THIS JOB AND ALL OTHER OPPORTUNITIES AVAILABLE.