Role Profile – Data Protection & Information Security
Manager
Location: Bristol
Role title: Data Protection & Information Security Manager
Department: IT & Projects
Reports to: IT & Projects Director
Purpose of the role:
The Data Protection and Information Security Manager will be a subject matter expert in all aspects
of data protection and information security. They will be the lead role in ensuring compliance with
Data Protection and GDPR regulations for Lifetime Training Group and managing the continued
implementation, monitoring and control of information and data governance.
The role requires a hands on manager who has direct experience in understanding personal
identifiable (PI) data, and working with business and technology teams on how to manage, secure
and remove PI data as defined by the legal/regulatory requirements and Lifetime Information
Security Group.
This role will suit an individual who has a passion to develop their own skills and knowledge in
information security and data protection compliance; a proactive person who is a ‘hands on’
starter/finisher, that’s driven, enjoys responsibility and achieving results; a highly organised person
in their ability to manage and prioritise workload; adept at operating effectively within an
organization delivering via influence and relationships rather than all under their control.
Role accountabilities
Manage the design, delivery and development of the Data Protection and Information Security Policy to
ensure it comprehensively meets current business needs and evolves to provide clear added value.
Develop and continually evolve Lifetime’s Information Security strategy and ensure that there is
quantifiable progress in applying the strategy
Own, review and contribute to information security policy and associated procedures and standards.
Develop the operational processes and controls, and assess their effectiveness in mitigating Information
Security and Data Protection risks faced by the Lifetime Training Group
Monitor and enforce the information security policy and technologies for all Lifetime business processes,
systems and infrastructure.
Lead the business with the creation and maintenance of data protection registers to monitor and track
data sharing arrangements, data retention policies, breach notification, ICO registrations and effective
asset management and disposal.
Lead the development of the risk management and control systems
Define and enforce personal identifiable data lifecycle management processes
Facilitate the remediation of identified vulnerabilities for IT security and IT risk.
