Data Protection Officer (2050)
Location: Oxford based (with flexibility to work from home within our hybrid working arrangements)
Hours: 36
Salary: £49,601 – 58,940 FTE
Job Type: Open ended
Closing Date: 14 June 2024
Oxfam is a global movement of people working together to end the injustice of poverty.
Do you have a strong understanding of GDPR and other data protection laws and practices?
Do you have experience managing risks around personal data in a large and complex organisation?
Do you have a track record of holding organisations accountable during difficult decisions?
If the answer is yes, then we would like to hear from you.
The Role:
Oxfam GB and Oxfam International are looking for our new Data Protection Officer (DPO). This role is responsible for ensuring strong data protection and data rights are built into everything we do. It is a senior role which will have to balance its time between ensuring the organisation takes its responsibilities seriously as well as overseeing our obligations under GDPR.
It works alongside our Oxfam GB Data Protection Manager and team who handle operational data protection concerns, such as Subject Access Requests and minor breaches, allowing the DPO to focus on the big picture.
What we are looking for:
We’re looking for a candidate who cares about Oxfam's mission to end poverty and is personally aligned to our feminist principles and values of empowerment, accountability and inclusion in all you do.
An ideal candidate for the role will also be / have:
- Strong knowledge of data protection law, especially GDPR and other relevant EU legislation.
- Experience in privacy and security risk assessment; well-versed in best practices for mitigating risks, including hands-on experience with privacy assessments, certifications, and information security standards.
- Experience carrying out Data Privacy Impact Assessments to understand and mitigate the risks of complex projects.
- Experience acting in an independent manner, which requires maturity, relationship skills, and the ability to handle sensitive and confidential tasks.
- Familiarity with cybersecurity and information security risks and controls
- Familiarity with data collection and storage processes
- Experience communicating with regulators, such as the Information Commissioner’s Office or the Charity Commission.
- Experience managing data sharing agreements with third-party organisations.
- Experience in building staff and management capacity about data protection practices and requirements.
- Critical thinking abilities to assess complex situations, identify gaps, and recommend solutions.
- Experience staying informed about emerging technologies and their impact on data protection risks.
We offer:
We offer a competitive salary and a range of additional benefits to staff including flexible working options, generous pension scheme, annual leave, additional leave allowances, company sick pay, life assurance and a range of other benefits.
From the day you join Oxfam we invite you to stretch and learn in your role. Our wide range of Learning & Development opportunities includes in-house courses, e-learning modules, on-the job learning opportunities, coaching and mentoring, and much more.
You can read more about all Oxfam has to offer here.
Flexfam:
We believe flexible working is key to building the Oxfam of the future, so we’re open to talking through the type of flexible arrangements which might work for you.
How to apply:
As part of your online application, please upload your up to date CV and Cover Letter explaining your suitability against the essential criteria in the job profile.
Our values and commitment to safeguarding
Oxfam is committed to preventing any type of unwanted behaviour at work including sexual harassment, exploitation and abuse, lack of integrity and financial misconduct; and committed to promoting the welfare of children, young people, adults and beneficiaries with whom Oxfam GB engages. Oxfam expects all staff and volunteers to share this commitment through our code of conduct. We place a high priority on ensuring that only those who share and demonstrate our values are recruited to work for us.
The post holder will undertake the appropriate level of training and is responsible for ensuring that they understand and work within the safeguarding policies of the organisation.
All offers of employment will be subject to satisfactory references and appropriate screening checks, which can include criminal records and terrorism finance checks. Oxfam GB also participates in the Inter Agency Misconduct Disclosure Scheme. In line with this Scheme, we will request information from job applicants’ previous employers about any findings of sexual exploitation, sexual abuse and/or sexual harassment during employment, or incidents under investigation when the applicant left employment. By submitting an application, the job applicant confirms his/her understanding of these recruitment procedures.
We are committed to ensuring diversity and gender equality within our organisation and encourage applicants from diverse backgrounds to apply.
About us
Oxfam is a global community who believe poverty isn’t inevitable. It’s an injustice that can be overcome. We are shop volunteers, women’s right activists, marathon runners, aid workers, coffee farmers, street fundraisers, goat herders, policy experts, campaigners, water engineers and more. And we won’t stop until everyone can live life without poverty for good.
Oxfam GB is a member of international confederation of 21 organisations working together with partners and local communities in the areas of humanitarian, development and campaigning, in more than 90 countries.
A thriving diverse Oxfam:
It’s people power that brings about change. To play our part as a global organisation working to overcome poverty and inequality, we need equality, diversity and inclusion across our community of staff, partners and volunteers. Together, we’re committed to becoming a more diverse workforce, better able to tackle the global challenges that face our world today.
To do that:
- We need to dismantle the unequal power structures that exist everywhere, this including Oxfam and the wider development and charity sectors.
- We need an inclusive Oxfam where everyone can bring who they are to our work and feels celebrated for the differences they bring.
- We want and need everyone, and that means we need you.
Working within the IT Department, the Senior Support Analyst is the primary resource responsible for advanced 3rd line support of our systems, infrastructure, and networks. This covers both troubleshooting complex issues as they arise, as well as handling system implementations, maintenance, and configuration changes. You will help to ensure our IT services to our residents, members, and the Trust staff, are of the highest quality. In particular you will be responsible for the management of the broader Somerset House wired and wireless networks, resolving network issues, configuring switching, routing, and firewalls. You will lead on the provisioning of IT infrastructure for events and be responsible for the onboarding and continued service delivery of IT and communications services in resident offices and member spaces.
You will work across a range of technologies and systems, from desktops to server to SaaS, maintaining ownership of support cases and project work from start to finish. Additionally, the role will participate in the implementation of various IT solutions and projects as we work to improve our digital capabilities.
Somerset House pursues a ‘Step Inside, Think Outside’ spirit and is born from the creative community we nurture - the experience and perspectives we host across background, age, race, and stage, and the intersections and crossovers we encourage.
What we are looking for:
- Advanced management, maintenance, and configurations of our large site wide network, and to be the point of escalation when there is a service delivery issue. The Cisco Meraki network consists of over 6,500 wired data ports, 335 wireless APs, 179 switches, and carries up to 7,000 clients a day.
- Advanced management, maintenance, and configurations of our additional infrastructure including our on-premises server estate, hybrid Active Directory, Microsoft 365 tenant, and various SaaS solutions.
- Plan and configure complex IT connectivity and other services (including wired connections, wireless connections, and VoIP telephony) across all tenanted spaces, including those areas occupied by the Trust.
- Plan and configure complex IT connectivity and other services (including wired connections, wireless connections, and VoIP telephony) across all event spaces as required by specific event requirements. This includes large scale public events run by the Trust with up to 3,000 audience members, and private hire events from our commercial events clients.
- Deal with and resolve escalations from the Support Analysts for residents, members, event partners, and Trust IT support issues and requests, ensuring that services are provided to the agreed standards.
- Resolve all reported IT issues in a professional and timely manner, documenting all activity on the service desk ticketing system, conforming to SLAs, and adjusting priorities to deal with urgent issues and requests.
- Where appropriate, escalate issues to external vendors as required and monitor the escalation to ensure satisfactory resolution. Escalations to external vendors are rare and it is expected that almost all cases would be resolved inhouse.
- Monitor and manage ticket queues, alerts, automated tickets, and perform daily checks on various systems as required.
- Research, project manage, and implement new solutions, security features, adaptations, and upgrades to IT services, working closely with colleagues to advise on changes for all future developments. Ensure that technical solutions are clearly defined and documented for the requirements of the intended client base.
- Hand over projects in a timely manner, with all operating and maintenance documentation in place.
- Undertake the training of others as required and document any processes or systems that are out of date or currently do not have documentation.
- Participate in the procurement of IT services, hardware, and software, providing specifications and contributing to tender documentation.
- Familiarise yourself with existing systems, processes, and policies, and look to improve these wherever possible. Create and update IT and related documentation to allow retention and sharing of knowledge within the team and the Trust.
- Participate as a team player in the support of colleagues within the department and across the Trust’s operations.
- Where required by key live events, exhibitions, and regular system maintenance taking place at Somerset House, to be able to shift working hours and days to provide support coverage.
There may be times when you are expected to undertake other duties that may be asked of you from time to time.
Skills, knowledge & expertise required for the role:
Experience:
- 3rd line level networking concepts and hands-on management including VLAN, IP, DNS, DHCP, Firewall ACLs, routing, RADIUS, NAT.
- 3rd line level of Windows Server, Active Directory, Group Policy, Microsoft Hyper-V, Mimecast, Office 365, and Azure, including line support and configuration.
- 3rd line level, supporting and installing standard productivity applications (Office 365, Teams, OneDrive, Adobe, AutoCAD, and various SaaS solutions) and operating systems (Windows 10/11, Windows Server 2012/2016/2019/2022, some Mac OS)
- Supporting desktop hardware (primarily Dell laptops) and mobile devices (iOS and Android mobile phones and tablets).
- Cyber security concepts and best practice, including Multi Factor Authentication, phishing, ransomware, passwords, firewalls, social engineering.
- Working in an IT service desk or team, ideally within a serviced/managed office environment.
ITIL Foundation certification, Cisco or Cisco Meraki, and technical Microsoft qualifications are desirable.
Skills:
- Exceptional knowledge of network infrastructure, both wired and wireless.
- IT solution implementation skills across multiple technologies, from the initial proof of concept to the final solution delivery and signoff.
- Strong communication skills with the flexibility to deal with a varied customer base.
- Coaching or training end users in technical expertise.
- Knowledge of VoIP telephony.
- Knowledge of spam filtering software and configuring policies
- Knowledge of system backups, for example, Microsoft Azure Backup Service.
- Skills in supporting a range of specific solutions are desirable, including hypervisors (Hyper-V), Cisco Meraki, Mimecast, Bitdefender, AlienVault SIEM, PaperCut, PRTG, Jira, EPOS systems, PDQ Deploy, Access Finance, Nexudus, Priava or similar events management software, and Tessitura.
Benefits to working at Somerset House
Mental Health & Wellbeing
- Access to our external Employee Assistance Programme (CiC) for free 24/7 confidential advice and support, including up to 6 free counselling sessions per year where needed
- Mental health support and guidance from our in-house trained Mental Health First Aiders
- Hybrid working based on having 3 days in the office per week (pro rata if part-time)
- Contribution towards eye tests and glasses
- Trust life insurance scheme
Holiday
- Enhanced annual leave – 25 days plus bank holidays (pro rata)
- Birthday leave - additional day leave on or within a week of your birthday
- Extra day off - to celebrate anything of your choice
Other Leave
- Sick leave – 20 days full pay, followed by 20 days half pay (pro rata)
- Emergency dependent care – option to use 25% of paid sick leave for emergency care of a dependen
- Enhanced maternity pay
Pension
- 8% employer pension contributions
- No minimum requirement for employee contributions
- Option for salary exchange
- Interest-free loans
- Season ticket loan
- Cycle to Work scheme
Discounts, offers and free stuff
- The list is endless and includes tickets to Somerset House events and entrance to other London Heritage sites
- Discounts in Somerset House cafes and restaurants
- Discounts with various high street retailers and restaurants
- Discount to local leisure centres
About Somerset House Trust
Somerset House hosts the UK’s largest and most exciting creative community right in the heart of London, and are always looking for new talent to join our team. We welcome 3 million annual visitors to share our unique combination of cultural events, the creative industries and history. This mix informs and powers our programme and organisational culture, making us a singular, compelling and inclusive place to visit and work.
Our Commitment to Anti-Racism, Diversity and Inclusion:
Somerset House is open to all and we value the unique skills of everyone. Somerset House Trust is an equal opportunities employer and is committed to championing equality, diversity and inclusion in our workplace, so if you’re a suitably qualified applicant, we encourage your application whatever your age, disability, gender, gender identity, race, religion or belief, sexual orientation or socio-economic background.
Somerset House is actively anti-racist, you can read about our Anti-Racism Pledge and the action we’re taking here. We are working hard to ensure our people, our onsite community and our sector reflect, represent and include all of society.
With some recruitment stages, where candidates are equally qualified, we will seek to prioritise diversity to help us to increase representation across the creative economy and the Trust.
We anonymise all job applications to help avoid discrimination in the initial screening stage of our recruitment process and reinforces our commitment to focus on skills and qualifications of all applications from the start.
Please get in touch if you have any questions or require any adjustments to be made during the recruitment process.
The client requests no contact from agencies or media sales.