Data Protection Manager – Hybrid Role

About the role

We are seeking an experienced Data Protection Manager to lead data protection and information governance for a well‑established healthcare organisation in Ashford. Reporting to the Director of Clinical Governance, you will work in a hybrid setting, collaborating with senior leaders and the external Data Protection Officer to ensure compliance with UK GDPR and related standards.

Key responsibilities

• Lead the organisation's data protection and information governance activities.
• Manage Subject Access Requests (SARs), Freedom of Information (FOI) requests and Data Protection Impact Assessments (DPIAs).
• Develop, review and maintain information governance policies and procedures.
• Provide expert advice on data protection legislation and information governance matters.
• Support compliance with the Data Security and Protection Toolkit (DSPT).
• Collaborate with IT teams on cyber security initiatives and incident response.
• Deliver training and raise awareness of data protection and information governance.
• Conduct audits, monitor compliance and drive continuous improvement.
• Build strong relationships with internal stakeholders and external partners.

Required profile

• Previous experience in a Data Protection, Information Governance or Compliance role.
• Strong working knowledge of UK GDPR, data protection legislation and information governance.
• Proven ability to manage SARs, FOI requests, DPIAs and data‑breach processes.
• Excellent communication skills with the ability to influence senior stakeholders.
• Exceptional attention to detail and strong organisational abilities.
• Capability to interpret legislation and provide commercially focused advice.
• Proactive, solutions‑focused attitude with strong problem‑solving skills.

Required skills

• Data Security and Protection Toolkit (DSPT)
• Cyber security
• Incident response
• Data Protection Impact Assessments (DPIAs)
• Subject Access Requests (SARs)
• Freedom of Information (FOI) requests

What we offer

• Competitive salary up to £40,000 per annum.
• Hybrid working arrangement.
• Opportunity to influence data protection strategy within a values‑driven healthcare organisation.