GDPR Executive - Quality & Risk

Hugh James; Cardiff; On-site; GBP 100,000 - 125,000; Full time

Job summary

A top law firm in Cardiff is seeking a GDPR Executive to enhance data protection standards across the firm. You will provide practical advice, manage data requests, and support compliance initiatives. The ideal candidate will have GDPR experience, strong drafting skills, and the ability to influence stakeholders. Join a collaborative team where every contribution makes a difference.

Benefits

Minimum 25 days holiday

Two Corporate Social Responsibility days

Birthday day off

Death in service benefit

Auto enrolment pension scheme

Hybrid working

Employee Assistance Programme

Discounts for local businesses

Professional fees paid

Employee recruitment incentive scheme

Qualifications

• Demonstrable experience in a GDPR/Privacy role within a regulated environment.
• Experience handling DSRs, data sharing agreements, and breaches.
• Knowledge of PECR and familiarity with ISO 9001.

Responsibilities

• Deliver business-friendly advice on personal data handling.
• Manage data subject requests end-to-end.
• Support GDPR training and awareness campaigns.

Skills

Experience in a GDPR/Privacy role

Handling data subject requests (DSRs)

Strong drafting skills

Clear, practical advice to non-specialists

Education

IAPP CIPP/E or CIPM (or equivalent)

Job description

Basis

Full time

Job category/type

Business Support

Date posted

30/10/2025

Job reference

HJ0403

This vacancy is open to direct applications only, no approaches via recruitment agencies will be accepted at this time.

Hugh James, a highly ranked top 100 law firm based in the centre of Cardiff, is currently looking to recruit GDPR Executive to join their Quality & Risk Department. The role Were looking for a hands‑on Data Protection & GDPR Advisor to join our Quality & Risk team.

Youll deliver practical, business‑friendly advice across the firm, helping colleagues handle personal data lawfully, respond to requests and incidents efficiently, and embed privacy by design.

This is an exciting opportunity to play a key role in upholding our high data protection standards and supporting colleagues across the firm to handle personal data responsibly and effectively.

Youll work in a collaborative, forward‑thinking environment where challenges are met with confidence, and every day brings the chance to make a real impact.

Skills & Qualifications

Depending on experience, you may lead on specific workstreams under the supervision of the In‑house Compliance Associate.

• Manage data subject requests (DSRs) including SARs, Right to Erasure, and other rights requests end‑to‑end.
• Maintain and update the firm's ICO registrations and associated records.
• Assist with drafting, reviewing, and updating privacy notices and internal procedures.
• Triage incidents, perform risk assessments, and prepare ICO notifications where needed.
• Assist with supplier due diligence, DPIAs, and vendor compliance checks.
• Track GDPR/PECR developments and support internal policy updates.
• Support GDPR training and awareness campaigns including the annual 'GDPR Month'.
• Maintain registers and logs (incidents, DPIAs, DSRs) and assist with privacy governance activities.
• Support certification and assurance projects and privacy‑by‑design initiatives.

We Would Welcome Your Application If You Have

• Demonstrable experience in a GDPR/Privacy role, ideally within a regulated or professional services environment.
• Experience handling DSRs, DPIAs/TRAs, data sharing agreements, breaches and ICO engagement.
• Strong drafting skills for policies, notices, and client questionnaires.
• Ability to provide clear, practical advice to non‑specialists.
• Desirable but not essential: IAPP CIPP/E or CIPM (or equivalent), PECR knowledge, familiarity with ISO 9001 and Lexcel.

To be successful in this role you will need to be:

• Organised and analytical, comfortable managing logs and assurance evidence.
• Collaborative, with a service mindset and confidence to influence stakeholders at all levels.

Life at Hugh James

We never shy away from a challenge

We are a leading, full‑service UK law firm. Since our beginning, we have been led by the things that matter. We care about fighting for the right outcomes. Solving the seemingly unsolvable. Protecting businesses, individuals and livelihoods. Supporting our people, our communities. Safeguarding our planet. Looking for a way forward? At Hugh James, challenges of all sizes are readily accepted.

The Hugh James difference

Our law firm has always been guided by the idea that self‑belief is just as important as skillset. Our pursuit of righting wrongs and protecting whats important keeps us driving forwards. Its in our roots! We wont stop until we find the answers; the outcomes that are needed.

We are focused on the work we do, the business we run, and our culture. Our entrepreneurial spirit has taken us from humble beginnings to a strong presence across the UK with offices in Cardiff, London, Manchester, Southampton and Plymouth servicing clients from businesses, individuals and banks to public sector organisations, property companies, education establishments and utilities providers. Our collegiate culture, our forward‑looking ethos, our values serve to make us bigger, better, bolder than ever before.

A positive force in the community

Our work with charities on a local and national level plays a huge part in our day‑to‑day lives. We work with a large range of charities, some of which we support through fundraising, donations, volunteering and others we partner with where our areas of work cross paths. Staff, clients everyone comes together through a shared passion to do good in the community and support those in need.

Some of our benefits on offer include:

• Minimum of 25 days holiday plus bank holidays
• Two Corporate Social Responsibility days
• Birthday day off
• Death in service equivalent to twice annual salary
• Auto enrolment pension scheme
• Hybrid working
• Employee Assistance Programme
• Discounts for local businesses
• Professional fees paid (subject to requirement for your role)
• Employee recruitment incentive scheme

Hugh James is an equal opportunities and disability confident committed employer.

Thank you for taking the time to consider this opportunity. If you have questions, please contact Jack Osborne.

We reserve the right to close our vacancies earlier than the given deadline if we receive sufficient applications for the role.