Job Description

Data Protection Officer at JESS Dubai


IT
Listed On: 11 November 2024


Expires On: 22 November 2024


Dubai
Jumeirah English Speaking School (JESS) Dubai is looking to hire a Data Protection Officer, with an anticipated role start date in January 2025.
Branch: Arabian Ranches (but role will require visits to Jumeirah campus from time to time)

Working hours: 7:15 am to 3:30 pm Monday to Thursday | 7:15 am to 12:15 pm Friday

Holiday Entitlement: As per academic calendar

Reporting to: Director of IT | Head of Finance and Operations


Purpose:

The Data Protection Officer (DPO) is responsible for monitoring compliance with current data protection law, and has the knowledge, support and authority to do so effectively. They oversee the school's data protection processes and advise the school on best practice.



Safeguarding Statement



Safeguarding is everybody's responsibility. All staff working at JESS will have some contact with children and young people and will therefore be in a position of trust. Staff with teaching duties will be responsible for the students that they teach and may also have additional specific pastoral or other responsibilities for other students they do not teach. In addition, all staff will regularly interact with students who may seek assistance or otherwise interact with them whilst moving around the school. In all cases, staff have the responsibility for promoting and safeguarding the welfare of the students and must adhere to and always ensure compliance with the school's Safeguarding and Child Protection Policy and procedures to include whistleblowing and ensure all concerns are immediately passed on to the school's Designated Safeguarding Officer(s) (DSO).



Main Tasks and Duties



This not an exhaustive list of duties/responsibilities but is illustrative of the general nature and level of responsibility of the role. It is not a comprehensive list of all tasks that the DPO will carry out. The postholder may be required to do other duties appropriate to the level of the role, as directed by the Director of IT and/or Head of Finance and Operations. The responsibilities outlined may be modified, upon mutual agreement, to reflect or anticipate changes in the role:



The Data Protection Officer is responsible for:


• advising school leaders and staff about their data obligations under current data protection law
• work closely with internal departments and services to ensure compliance
• monitoring compliance and maintain a record of the school's data processing activities
• conducting regular data audits
• developing and updating data protection policies and procedures
• monitoring who in the school has access to personal data
• advising when data protection impact assessments are needed
• answering data protection enquiries from staff, parents and students
• making sure privacy notices are regularly reviewed and updated
• supporting and advising staff who have data protection queries
• communicating with the relevant UAE Government authorities in relation to data protection
• reporting to the Board of Governors about data protection and advising them of data protection risks
• advising on and coordinating responses to information rights requests
• making sure all assets containing personal data are appropriately managed and secure
• work with external stakeholders, such as suppliers or members of the community, on data protection issues
• take responsibility for fostering a culture of data protection throughout the school

Key Relationships



Internal:


• Head of Finance and Operations
• Director of IT
• Director
• Headteachers
• Head of Governance and Administration
• Admissions
• Facilities
• Finance
• Health Office
• Human Resources
• IT
• Procurement
• Security
• Staff
• Students


External:


• Parents
• Service Providers
• Government agencies

Person Specification



Qualifications and Experience:


• Bachelor's degree
• At least 2 years data compliance experience (preferably within a school environment)
• Experience using Microsoft 365 applications and iSAMS
• Experience or knowledge of 9ine Platform (desirable but not essential)


Technical Skills:


• Experience with cybersecurity software
• Ability to build and develop information technology (IT) systems
• Familiarity with relevant data collection and data storage processes
• Ability to efficiently use encrypting programs
• Risk assessment
• Experience with security reporting

Application Process



Please send your CV and completed JESS Dubai application form (attached below) through the submission box by 22 November 2024.



The anticipated start date for this role is January 2025.


JESS Dubai Application Form 2024.docx


JESS Dubai Application Form 2024.docx