Compliance & Data Privacy Lead – GDPR, ISO & ESG

Focus Resourcing; Thornhill; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Free on-site parking

Private healthcare

Group income protection

Life assurance

Pension scheme

Professional training and development

Job summary

Focus Resourcing is seeking a Compliance & Data Protection Officer in Cardiff to strengthen our client's governance, risk and data protection framework. The role focuses on maintaining UK GDPR compliance, governance practices and ongoing improvement of data protection controls.

You will lead DPIAs, data subject access requests, audit documentation and supplier due diligence while supporting ISO management systems and ESG reporting.

Qualifications

• Experience in Compliance, Data Protection, Governance, Risk, Quality, or Information Governance.
• Strong understanding of UK GDPR and Data Protection legislation.
• Proficiency in maintaining compliance records and management systems.
• Experience in supporting audits and compliance monitoring activities.
• Excellent organisational, administrative, and document control skills.
• Strong communication and stakeholder management abilities.
• Knowledge of ESG reporting and sustainability requirements.
• Relevant qualifications in Data Protection, Compliance, ISO Internal Auditing, or Governance.

Responsibilities

• Lead day-to-day GDPR and Data Protection compliance activities.
• Maintain Records of Processing Activities and compliance documentation.
• Conduct Data Protection Impact Assessments and support Data Subject Access Requests.
• Investigate data breaches and privacy incidents, ensuring corrective actions are implemented.
• Manage supplier compliance onboarding processes and conduct due diligence reviews.
• Support the maintenance and improvement of ISO Management Systems, including ISO 9001, ISO 14001, ISO 45001, and ISO 27001.
• Assist with ESG data collection, validation, and reporting activities.
• Prepare audit documentation and monitor compliance against policies and regulatory requirements.

Skills

Compliance awareness

Data Protection

Governance

Risk management

Quality management

Stakeholder management

Documentation control

MS Office

ESG knowledge

Education

Data Protection qualification

ISO Internal Auditing

Governance certification

Tools

Microsoft Office

Document management systems

Job description

Focus Resourcing is seeking a Compliance & Data Protection Officer in Cardiff to strengthen our client's governance, risk and data protection framework. The role focuses on maintaining UK GDPR compliance, governance practices and ongoing improvement of data protection controls.

You will lead DPIAs, data subject access requests, audit documentation and supplier due diligence while supporting ISO management systems and ESG reporting.