Requirements of the role

Would you like to be part of a team investigating high profile data protection breach cases? The Cyber Incident Response and Investigation team are hiring a Lead Technical Investigations Officer. Experience of conducting investigations is desired for the role but not essential. This is an exciting time to join the ICO investigations department and take part in work that has a significant impact protecting the information rights of the public.

The Information Commissioner’s Office (ICO) is the independent regulator of information rights. In a data-driven world, we provide advice, guidance, and support to organisations enabling compliance with their obligations, as well as protecting individuals and their personal data.

As an employer, we are passionate about making a positive difference to the lives and careers of our people, and we empower you to be curious, impactful, collaborative and respectful.

Job Description

The Cyber Incident Response and Investigation Team within the Investigations department is responsible for investigating data protection breach cases including those where the breach occurred due to a technical failing (eg through attacks on data controllers’ systems) or technology related organisational failing.

As well as carrying a personal investigation caseload, you will have a role in supporting the identification of new and emerging threats to data security in the technology arena, in stakeholder engagement and relationship management, and providing technical expertise to colleagues across the Investigations Department and beyond.

Key responsibilities:

• Manage a caseload of predominantly technology-centred cases autonomously, making independent recommendations and where appropriate decisions, about cases, priorities and opportunities to improve the practices of those the ICO regulates.

• Using judgement, intellectual ability and initiative, to handle cases and undertake wider regulatory activity under the legislation overseen by the ICO in line with established strategies, policies and procedures.

• Negotiate with organisations to achieve compliance with the relevant legislation, either in one case or in the future where appropriate.

• Provide good customer service to all parties, managing expectations sensitively and communicating clearly, regularly and at an appropriate level, in writing and over the telephone.

• Be conversant with relevant legislation and political, social and legal as well as technological developments, that impact on information rights.

• Provide technical advice to the Investigations department and other internal stakeholders in relation to the cases under investigation, and where appropriate, in connection with wider threats and trends.

• Develop and maintain relationships with any relevant internal/external stakeholders as appropriate.

• Provide briefing or guidance material on case related matters for more senior members of staff and present case overviews to colleagues where necessary.

• Comply with ICO Policies and Procedures

View on member website