Senior Data Protection Advisor - DPIA & Risk Lead

Government Recruitment Service; Cardiff; On-site; GBP 45,000 - 53,000; Full time

Benefits offered by this job

Disability Confident employer scheme

Job summary

Government Recruitment Service in Cardiff is seeking a Senior Data Protection Advisor to support the department's operational data protection risk assurance, ensuring personal data is handled lawfully, securely and responsibly while enabling the effective delivery of departmental priorities.

You will work in a small specialist team, provide expert guidance on complex DPIAs, and collaborate with Digital, Knowledge and Information Management, Legal and business areas to enable innovation, digital

Responsibilities

• Lead complex, high-profile and high-risk Data Protection Impact Assessments (DPIA) reviews from triage to sign-off, providing authoritative risk assurance and practical mitigation for the Department’s most challenging processing activities
• Work with teams and suppliers to identify and mitigate data protection risks, making sure actions are taken and tracked using the right tools.
• Ensure DPIA recommendations and risks are clearly documented and the Record of Processing Activity (RoPA) for the processing is accurate.
• Liaise with the Chief Information Security Officer (CISO) and Data Protection Officer (DPO) when medium/high risks have been identified.
• Drafting/assuring privacy notices, data sharing agreements, and Article 28 clauses: coordinate with Cyber, Commercial and Technology subject matter experts.
• Lead or support ICO consultation (where required) and prepare clear, decision-ready risk products for senior governance forums (e.g., ARAC).
• Administrate BIST’s Data Protection Assurance platform, identifying and implementing improvements to meet business needs while ensuring compliance with data protection legislation.
• Line-manage junior analysts and provide key leadership within the Data Protection Team

Job description

Government Recruitment Service in Cardiff is seeking a Senior Data Protection Advisor to support the department's operational data protection risk assurance, ensuring personal data is handled lawfully, securely and responsibly while enabling the effective delivery of departmental priorities.

You will work in a small specialist team, provide expert guidance on complex DPIAs, and collaborate with Digital, Knowledge and Information Management, Legal and business areas to enable innovation, digital