Information Security and Data Protection Coordinator

Company Description: Médecins Sans Frontières/Doctors Without Borders (MSF) provides life‑saving emergency relief and longer‑term medical care to some of the most vulnerable and excluded communities around the world. As an independent medical humanitarian organisation, we deliver care based only on need, regardless of ethnic origin, gender, religion or political affiliation. MSF relies on donations from private individuals and organisations for the majority of its income. This private funding gives MSF the freedom to respond where needs are greatest and to speak out publicly, free from any political interference.

Position: The Information Security and Data Protection Coordinator supports MSF UK and Ireland in the effective coordination and day‑to‑day operation of its information security and data protection arrangements. The role focuses on maintaining key records, documentation and processes that underpin compliance with data protection legislation and good information security practice, including the UK General Data Protection Regulation (UK GDPR). Working within the Transparency and Accountability (T&A) Team, the role supports the development and ongoing operation of MSF UK and Ireland’s information security and data protection framework by liaising with colleagues in IT, Procurement and other departments, and by supporting designated risk owners.

Job Purpose: The role provides practical coordination and advice to help ensure that appropriate technical and organisational measures are documented, reviewed and applied in a way that meets operational needs and regulatory requirements. The post holder plays an important enabling role, supporting information security and data protection decision makers (especially the Data Protection Focal Point and the Senior Information Risk Owner) to take a risk‑based approach to compliance decisions by maintaining accurate records, coordinating processes, and supporting effective governance, reporting and incident management.

Hours: 37.5 hours per week, Mon-Fri

Duration: Permanent

Location: London - hybrid, 2 days per week in office (including Wednesdays)

Salary: £41,902.62 to £51,214.32 per annum

Requirements:

• Experience in information risk management, or demonstrable willingness and ability to develop this expertise in post.
• Knowledge of the requirements for information security policies, or the ability to acquire this knowledge with appropriate training and support.
• Practitioner-level experience or qualification of data protection legislation, or relevant transferable experience and willingness to work towards practitioner-level knowledge or qualification.
• Experience or qualification in project management methodology (PRINCE2, Agile, PMI, APMP), or willingness to develop project management skills in post.
• Ability to synthesise large volumes of complex and/or sensitive material.
• Willingness to be flexible and adaptable to meet the requirements of the team.
• Strong interpersonal skills, with excellent judgment and diplomacy.
• Good research and analysis skills, with ability to produce summaries and initial advice and recommendations.
• Good record keeping skills for legal and regulatory compliance work, as necessary for external regulatory reporting, as well as to support timely internal reporting to CoDir, Board and Board sub-Committees.
• Excellent oral and written communication skills in the English language including the production of briefings, governance papers, policies and internal communications as well as presenting at governance meetings and training sessions and workshops to staff on relevant processes.
• Experience in the practical use of personal IT equipment and Microsoft Office 365 suite (especially Excel, Word, Access and Powerpoint).
• The ability to effectively collaborate and communicate within a hybrid working environment utilising Teams, SharePoint, One Drive and Yammer.

Other information:

Accessibility: We are committed to removing barriers for people with specific accessibility needs. If you need an adjustment to the recruitment process to be considered for the role, please let us know by contacting recruitment.UK@london.msf.org.

Diversity, Equity and Inclusion: We are a welcoming, diverse, and inclusive organisation. MSF UK thrives when everyone feels comfortable bringing their best self to work. We celebrate difference, whilst striving to create an environment where colleagues feel respected and valued for their unique potential.

Safeguarding: MSF UK/IE is dedicated to safeguarding everyone who comes into contact with the organisation, for whatever reason and however brief. All posts are subject to safer recruitment process which include robust reference requests, scrutiny of employment history and where applicable criminal record and barring checks.

Right to work in the UK: Candidates must have the right to work in the UK. Employment sponsorship will NOT be offered by MSF UK for this role.