Strategic Compliance & Data Protection Lead

Yolk Recruitment; Peacehaven; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

LGPS

Generous annual leave

Learn Welsh

Employee assistance programme

Job summary

Coleg y Cymoedd seeks a Head of Compliance and Data Protection Officer to lead the college's compliance assurance and act as its DPO. You will provide expert guidance on UK GDPR, Data Protection Act 2018 and related legislation, reporting to the Vice Principal: Corporate Services and working with senior leaders, the Governing Body and external regulators.

You will drive DPIAs, information governance, records management and risk-based monitoring, while coordinating Medr reporting and assurance

Qualifications

• Degree-level qualification in a relevant discipline such as law, information governance, compliance.
• Recognised data protection qualification (BCS/ISEB/IAPP) or willingness to obtain within 6 months.
• Substantial experience as a Data Protection Officer or senior data protection/compliance role.

Responsibilities

• Lead compliance assurance and act as Data Protection Officer for the college.
• Provide independent oversight across regulatory compliance, data protection and information governance.
• Review DPIAs, policies, information management and retention.
• Support Medr reporting and annual assurance return.
• Advise senior leaders and Governing Body on regulatory matters.

Skills

Data protection

Governance

Regulatory compliance

DPIAs

Subject Access Requests

FOI requests

Information governance

Risk management

Advising leaders

Education

Law or information governance degree

CIPP/E or equivalent

Tools

GRC tools

Job description

Coleg y Cymoedd seeks a Head of Compliance and Data Protection Officer to lead the college's compliance assurance and act as its DPO. You will provide expert guidance on UK GDPR, Data Protection Act 2018 and related legislation, reporting to the Vice Principal: Corporate Services and working with senior leaders, the Governing Body and external regulators.

You will drive DPIAs, information governance, records management and risk-based monitoring, while coordinating Medr reporting and assurance