Strategic Compliance & Data Protection Lead

Yolk Recruitment Ltd; Nantgarw; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

LGPS

Generous annual leave

Learn Welsh

Employee assistance programme

Family-friendly policies

Gymnasiums at Nantgarw and Ystrad Myna

Free parking at all College campuses

Annual pay progression

Car leasing scheme

Hair, beauty and catering discounts

Specsavers vouchers

ASPIRE Employee Recognition Award

Job summary

Coleg y Cymoedd is appointing a new Head of Compliance and Data Protection Officer to lead our compliance and information governance across four campuses. Reporting to the Vice Principal: Corporate Services, you will provide independent expert advice on UK GDPR, data protection and regulatory matters to senior leaders and the Governing Body.

You will review DPIAs, policies, records management and information asset registers, driving risk-based improvements and preparing for Medr reporting and

Qualifications

• Degree-level qualification (or equivalent) in a relevant discipline such as law, information governance, compliance, or a related field.
• A recognised data protection qualification (BCS Practitioner Certificate, ISEB Certificate in Data Protection or IAPP CIPP/E), or willingness to obtain one within 6 months of appointment, supported by the College and required to pass probation.
• Substantial experience as a Data Protection Officer or in a senior data protection or compliance role within a regulated environment.
• Experience leading or managing data protection and compliance within a regulated organisation.
• Experience advising senior leaders, executive teams and governing bodies on regulatory, data protection and information governance matters.
• Experience developing compliance frameworks, policies, registers and risk-based monitoring arrangements.
• Experience managing Subject Access Requests, Freedom of Information requests, data breaches and ICO correspondence.
• Experience advising on DPIAs, records of processing activities and information asset registers.
• Experience with regulatory returns, assurance submissions or statutory reporting.
• Experience with data sharing agreements, processor contracts and supplier due diligence.
• Expert working knowledge of UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025.
• Sound knowledge of the Freedom of Information Act 2000 and the Environmental Information Regulations 2004.

Responsibilities

• Lead the college's compliance assurance function and act as its designated Data Protection Officer (DPO).
• Provide independent oversight and expert advice across regulatory compliance, data protection and information governance to senior leaders and the Governing Body.
• Coordinate and lead preparations for Medr reporting, including Annual Assurance Return to Medr.
• Address DPIAs, data breaches, FOI requests and information governance enhancements.
• Develop and implement policies, records management, information asset registers and supplier due diligence.

Skills

Data protection

Compliance leadership

DPO experience

Advising senior leaders

Regulatory knowledge

Policy development

Education

Degree-level qualification (or equivalent)

Data protection qualification (e.g., CIPP/E) or willingness to obtain within 6 months

Job description

Coleg y Cymoedd is appointing a new Head of Compliance and Data Protection Officer to lead our compliance and information governance across four campuses. Reporting to the Vice Principal: Corporate Services, you will provide independent expert advice on UK GDPR, data protection and regulatory matters to senior leaders and the Governing Body.

You will review DPIAs, policies, records management and information asset registers, driving risk-based improvements and preparing for Medr reporting and