The Child and Family Agency was established on 1st January 2014 and is responsible for a range of statutory functions including provision of child protection, alternative care, specified regulatory services and a range of family support services. The Agency has commenced a major improvement programme with significant focus on Practice, Culture and Structure.

The Agency currently has responsibility for a budget of circa €1.2billion and delivers its services through over 5,500 people in 259 locations across the Country.

The Child and Family Agency has responsibility for the following range of services:
•Child Protection and Welfare
•Parenting, Family Support and Early Help Services
•Alternative Care
•Birth Information & Tracing and Adoption
•Tusla Education Support Services (TESS)
•Children’s Service Regulation
•Counselling and Therapeutic Supports
Further information is available on www.tusla.ie

Data Protection Unit
Tusla processes a large volume of highly sensitive personal data on a daily basis in order to deliver the critical services it provides to Children and Families across the State. In doing this, Tusla must ensure that it has adequate organisational and technical measures in place; that the rights and freedoms of Tusla service users are respected and that privacy risks to those rights and freedoms are minimised; and that a fit for purpose operating model for Data Protection and FOI is implemented.

Main Duties and Responsibilities
•Assess and implement appropriate data sharing arrangements with third parties to govern the sharing of personal data.
•Complete desktop and in-person assessments of third party technical and organisational measures to ensure appropriate security of Tusla personal data and to mitigate any data protection risks identified.
•Complete Data Protection Impact Assessments and other privacy assessments.
•Complete the compilation of monthly, quarterly and yearly data protection compliance metrics.
Team Effectiveness
•
Escalate any high risk items to the relevant General Manager or designated deputy.
•As required, deputise for the Data Protection Assessment and Compliance Manager.
•Supervise, allocate and oversee the work of assigned staff.
•Build relationships with relevant internal and external stakeholders.
Stakeholder Engagement
•Support data protection training and awareness events through the provision of SME content.
•Develop, format, and edit high-impact presentations for senior leadership meetings.
•Support the maintenance of Tusla’s Record of Data Processing Activities to ensure it is comprehensive, current and accurate.

Health & Safety
•Comply with and contribute to the development of policies, procedures, guidelines and safe professional practice and adhere to relevant legislation, regulations and standards.
•Have a working knowledge of the Health Information and Quality Authority (HIQA) Standards as they apply to the service for example National Standards for Child Protection and Care and comply with associated Tusla – Child and Family Agency protocols for implementing and maintaining these standards as appropriate to the role.
•To support, promote and actively participate in sustainable energy, water and waste initiatives to create a more sustainable, low carbon and efficient health service.

The above Job Description is not intended to be a comprehensive list of all duties involved and consequently, the post holder may be required to perform other duties as appropriate to the post which may be assigned to him/her from time to time and to contribute to the development of the post while in office.

Applicants must by the closing date of application have the following:
•Have a third level qualification on the National Framework of Qualifications in Ireland (or equivalent in another jurisdiction) in a relevant discipline, and / or have a formal Data Protection certification / qualification
AND
•2 years experience of risk based compliance frameworks, including control design risk identification and mitigation implementation, preferably in the area of data protection or similar.
AND
•Provide an example that demonstrates experience of one of the following:
oKnowledge of the law and practice of the General Data Protection Regulation and the Irish Data Protection Act 2018.
oExperience of compliance reporting processes and communications preferably in the area of data protection
AND
•Experience of managing and working collaboratively cross functionally with multiple internal and external stakeholders, as relevant to this role
AND
•Have the requisite knowledge and ability (including a high standard of suitability and management ability) for the proper discharge of the duties of the office

Health
A candidate for and any person holding the office must be fully competent and capable of undertaking the duties attached to the office and be in a state of health such as would indicate a reasonable prospect of ability to render regular and efficient service.
 

Character
Each candidate for and any person holding the office must be of good character