Data Protection Manager

The Coram Group consists of 14+ specialist children’s organisations and is led by the parent company ‘Coram’. Coram - the first children’s charity, helping more than 1 million children, young people and families every year. We support children and young people from infancy to independence, creating positive change that lasts a lifetime. Established by Royal Charter in 1739 as The Foundling Hospital, Coram has built a position of insight, influence and reach, by working closely with other organisations and other sectors; universities and government; professionals and families. We have ambitious plans for our future, to be the UK’s leading recognised authority on matters relating to children and young people, dedicated to getting young voices heard and improving life chances as the Institute for Children. The Coram Group works across and delivers a wide range of projects/services, all of which have different data protection challenges.

Tasks

• Keep up to date with the latest UK legislation and guidance from the ICO and work with the other members of the Compliance Team to ensure that the Coram Group’s policies, procedures and guidance documents are updated and reflect best practice including developments in AI and digital services
• Act as the primary liaison with the IT/Information Security team to ensure that data protection, advice, policies and privacy-by-design principles are technically accurate and aligned across both disciplines
• Ensure full compliance with the principles of GDPR - with a particular focus on child level data
• Contribute to the drafting of relevant data protection policies, procedures and guidance documents to ensure advice is current and accurate in this rapidly moving area
• Respond to data protection queries from the workforce directed to the Group internal mailbox providing expert advice, guidance, and research, demonstrating compliance with UK legislation and internal data governance policies
• Proactively identify gaps, risks, and opportunities within data protection, information governance, and privacy processes, and lead improvement initiatives that strengthen compliance, mitigate risk, and deliver organisational value
• Work to establish key relationships with different areas of the Coram Group, to understand their services, business needs and related data protection considerations ensuring their compliance with data governance and safeguarding of personal and sensitive client data
• Work with the Director of People & Compliance and the Compliance Team to plan, participate in and present at the bi-monthly virtual Data Protection Forum and other meetings/forums as required
• Contribute to the maintenance of the staff intranet Data Protection area (on SharePoint), writing news articles and communications relating to data protection updates, policy requirements and workforce education
• Support the Compliance Team with Coram Group funding applications with input into questions relating to data protection and information security
• Support the various Coram Group organisations with their regular data inventory audits
• Contribute to the annual Compliance End of Year Report
• Ensure that the Coram Group Risk Register is reviewed and updated annually
• Other general administration duties required to carry out the role

• Strong understanding of UK data protection legislation and information governance principles
• Ability to understand information technologies, systems, software and remote access technologies, and the interaction with data protection requirements
• Proven experience of working in a fast-paced data protection environment providing practical, risk-based advice to a workforce
• Previous experience and a demonstrated knowledge and understanding of working with children’s data and special category data and the associated data protection principles and safeguards is desirable
• Demonstrable knowledge of data protection and information governance requirements within legal and social work environments is desired
• An understanding of artificial intelligence (AI) technologies and their use within the workplace, including the ability to identify and advise on associated data protection, privacy, governance, and compliance risk
• Strong understanding of and the ability to effectively use Microsoft 365 applications, including Word, Excel, PowerPoint, Outlook and Teams, to a high professional standard
• Ability to research topics and communicate findings with senior management, peers and the Coram Group workforce
• Ability to think strategically, anticipate future developments in data protection and compliance and contribute to the development and delivery of the Compliance Team’s objectives, plans and strategies
• Proven track record of improving and embedding data protection practices
• Excellent strategic-thinking, problem-solving and decision-making skills
• Strong communication and interpersonal skills, with the ability to collaborate effectively with senior leadership, the IT Team and cross-functional teams
• Ability to self-manage within sometimes conflicting priorities and to deliver to time and budget