Location: Aylesbury
Overview
We are recruiting a Data Protection Manager to play a pivotal role in safeguarding information, strengthening compliance, and supporting high‑quality decision‑making across the organisation. This is a senior, influential role leading a specialist team within Information Governance, working closely with services, senior leaders and external partners.
If you are an experienced data protection professional who thrives on solving complex issues, influencing at senior level and leading people through change, this is an excellent opportunity to make a real organisational impact.
About us
Buckinghamshire Council is a relatively new organisation that combines the strengths and expertise of the previous five councils in the county to create positive change for local people, communities, and businesses. We are firmly focused on the future and have made a clear commitment to serve residents better and to provide stronger representation for Buckinghamshire, both locally and nationally.
About the role
As Data Protection Manager, you will lead the delivery of the statutory Data Protection service, ensuring compliance with data protection legislation and best practice. You will deputise for the Data Protection Officer where required, managing complex and sensitive casework while adapting to changing priorities in a fast‑moving regulatory environment.
Key aspects of the role include:
1. Working closely with the Data Protection Officer to support and embed compliance with UK GDPR, the DPA 2018 and associated statutory guidance across the organisation.
2. Working closely with the Data Protection Officer during ICO engagement or regulatory correspondence, as required.
3. Acting as a subject matter expert on Subject Access Requests (SARs), providing expert advice, guidance and ongoing support to staff involved in SAR processing and wider data protection rights.
4. Overseeing the completion and quality assurance of Data Protection Impact Assessments (DPIAs) and risk assessments.
5. Leading and developing a team of Information Governance professionals, ensuring high standards of performance, motivation and service delivery.
6. Leading and managing the operational delivery of Subject Access Requests (SARs), ensuring statutory compliance, effective case management and performance against deadlines.
7. Leading on and overseeing the investigation, coordination and management of personal data breaches and incidents, ensuring timely risk assessment, appropriate remedial action and organisational learning.
8. Designing and delivering data protection training and awareness programmes across the organisation.
9. Promoting a strong culture of accountability, transparency and privacy by design.
10. Coaching and mentoring staff to build organisational capability in data protection and information governance.
11. Monitoring performance, quality and statutory deadlines for information rights work
12. Acting as a subject matter expert on Subject Access Requests (SARs), providing expert advice, guidance and ongoing support to staff involved in SAR processing and wider data protection rights.
This role offers the opportunity to work at both a strategic and operational level, balancing leadership, technical expertise and stakeholder engagement.
About you
You will be a confident and credible Information Governance professional with strong leadership skills and expert knowledge of data protection legislation.
You will bring:
13. Proven experience of managing complex and escalated data protection matters, including high‑risk, sensitive or contentious cases.
14. In‑depth knowledge of UK GDPR, the Data Protection Act 2018, associated statutory guidance and emerging developments in the data protection landscape.
15. Experience of developing, reviewing and embedding data protection policies, procedures and service improvements within a regulated environment.
16. An experienced and effective people manager, with a proven ability to lead, motivate and develop staff to deliver high‑quality, compliant outcomes.
17. Excellent communication skills, with the ability to explain legal or technical issues in clear, confident and accessible language.
18. Strong organisational and time‑management skills, enabling you to manage competing priorities and meet statutory deadlines.
19. Analytical skills, with experience of researching, evaluating and presenting information to inform decision‑making and assurance.
20. Confidence and sound professional judgement to provide pragmatic, risk‑based advice and to work effectively with senior stakeholders.
21. A collaborative approach, with a commitment to sharing knowledge and contributing to continuous service improvement.
You will be educated to degree level (or equivalent) and hold a relevant professional or vocational qualification.