Information Manager - Data Protection

Starting salary: £43,227
Contract type: Fixed term until 7 May 2027
Grade: 4
Location: Longmore House, Edinburgh (with hybrid working)
Working Hours: Monday - Friday, 35 hours per week
Interviews: To be held online over MS Teams week commencing 13 July 2026

The Information Manager - Data Protection role contributes to one of five functions within the Information Management Team and you will provide expert advice and services to the organisation as the subject matter expert in Data Protection legislation.

The role will require you to support colleagues at all levels from across the organisation in effective Data Protection practices as defined by Historic Environment Scotland (HES) policy, procedure and good practice.

For more information about the post and information about the team, please access the full job description for this post. Please note that if you don't have Office 365 installed on your device, this can be opened using your browser.

Benefits of joining us at Historic Environment Scotland

• Enrolment onto a Civil Service Pension scheme – 28% employer contribution
• 25 days annual leave, pro-rata (increasing to 30 days after 3 years) + 11.5 public holidays
• Reimbursement for relevant professional subscriptions
• Support for further education and personal development
• Study leave for work related courses
• Flexible working hours (where appropriate)
• Free entry to all of our properties (with up to three guests)
• Free entry to English Heritage, Manx and Cadw properties
   

Key Responsibilities of this role

You will be a member of the Information Management Team within HES. You will be a primary technical expert for data protection in HES and have responsibilities which ensure the organisation maintains compliance with that legislation.

You will be an expert in and responsible for:

• Ensuring that HES data protection standards, procedures and processes are effectively implemented across HES. This will include:
  • Assessing Data Privacy Impact Assessments
  • Drafting data protection related legal agreements e.g. Data Processing Agreements
  • Drafting privacy notices
  • Assisting in maintaining compliance with website Cookies
  • Maintaining the HES Record of Processing Activities (ROPA)
• Reviewing and revising data protection policy, procedures and processes.
• Educating HES colleagues on the Data Protection and privacy standards, procedures and processes.
• Designing and implementing data protection process improvements as the lead authority in conjunction with colleagues across the organisation 
• Undertaking Information Management investigations on behalf of HES, specifically where personal data is involved.
• Acting as the point of contact for HES colleagues and members of the public providing advice, guidance and support on Data Protection matters
• Developing, co-ordinating and implementing the Data Protection strategy, processes, guidance, and testing/training, ensuring the effective and efficient implementation and application of Data Protection and Privacy at all levels across HES  
• Designing and delivering Data Protection training for all HES colleagues to ensure compliance with the legislation or other HES requirements as appropriate. 
• Designing and implementing Data Protection process improvements as the lead authority in conjunction with colleagues across the organisation.
   

Key requirements of the role:

In order for you to be successful in this post, we will be looking for you to submit a cover letter which addresses how you can meet each of the essential and desirable criteria (in up to 1,200 words), using examples of where you have demonstrated these criteria previously. Please ensure that you provide real life examples for each of the criteria to be considered for this post. You can use examples of how you have met this criteria from your work life, home life, education or volunteer experience. Please read our CV and Cover Letter Guidance first before completing, as you will only be eligible for selection if you use examples of how you meet the essential and desirable criteria.

Essential:

• A data protection qualification or a full demonstrable working knowledge of UK data protection legislation including the UK GDPR and the Data Protection Act 2018.

• Ability to interpret and apply data protection legislation, including the UK GDPR and the Data Protection Act 2018, alongside relevant public sector guidance and regulatory frameworks, to ensure compliant and transparent handling of personal data.

• Ability to undertake detailed information gathering, analysis and investigation.

• Experience of providing solutions with focus on information risk, compliance and governance.

• Excellent written and verbal communication skills.

• Ability to build and maintain positive working relationships and be able to influence colleagues to effect positive change.

• Excellent IT skills and in particular, Word and Excel.

Find out more about desirable skills and experience in our full job description.

We are dedicated to building a workforce which is reflective of diversity within Scotland. We warmly welcome applications from candidates of all backgrounds, regardless of age, race, gender or gender identity, religious beliefs, marital status, sexual orientation, disability, or neurodiversity. In support of our Gaelic Language Plan, we welcome applications from Gaelic speakers.

We want every candidate to have the best chance to succeed during the recruitment process. If you require your application in an alternative format, please reach out to us via email at recruit@hes.scot or call our Head Office at 0131 668 8600 and speak to a member of our People Team.

Please note that, at this time, we are unfortunately unable to provide sponsorship as part of the recruitment process, therefore you must have current right to work in the UK to be considered for a post.

To submit your application online, please read our ‘How to Apply’ followed by ‘Apply Now’ button to begin your application.