Data Protection and Technical Governance Manager

Data Protection & IT Governance Lead - Join Our Team!

Are you an expert in data protection, IT governance, and cybersecurity compliance? Do you have a passion for ensuring regulatory compliance, managing risks, and driving best practices? If so, we have an exciting opportunity for you!
Location: Manchester Contract: Full-time Salary: £50,000 per annum

Why Join Us?

At Access Education Group (including Access Further Education, dBs Institute, Access Sport, and Access Industry), we are committed to protecting data, enhancing IT security, and ensuring regulatory excellence. We are seeking a Data Protection & IT Governance Lead to drive compliance, develop policies, and implement robust cybersecurity and IT asset management strategies.
• What You'll Be Doing:
Data Protection & Compliance (DPO Responsibilities)

1. Act as the Data Protection Officer (DPO) for the Group, ensuring compliance with the Data Protection Act 2018, UK GDPR, and other UK data protection laws.
2. Develop and maintain privacy policies, procedures, and training programs for staff.
3. Conduct Data Protection Impact Assessments (DPIAs) and oversee data governance strategies.
4. Lead and manage the Data Protection & Information Security (DPIS) Committee.
5. Manage data breach responses, vendor compliance, and international data transfers.

IT Governance & Cybersecurity Compliance

1. Develop and implement IT governance frameworks (COBIT, ITIL) in collaboration with the Executive Head of Technical Operations.
2. Ensure cybersecurity compliance, risk management, and regular security assessments.
3. Oversee cyber essentials certification and implement staff cybersecurity training.

IT Asset & Estate Management

1. Maintain an accurate inventory of hardware, software, cloud, and data assets.
2. Ensure secure asset lifecycle management and compliance with software licensing.
3. Oversee risk management for IT infrastructure, cloud security, and shadow IT risks.

• What We're Looking For:

Proven experience as a Data Protection Officer (DPO) or in IT governance & cybersecurity.
Strong knowledge of UK GDPR, data protection laws, and cybersecurity best practices.
Experience in risk management, IT asset management, and compliance frameworks.
Excellent leadership, communication, and problem-solving skills.
Ability to drive policy development, training, and awareness initiatives.