Data Protection Officer & Head of Information Rights Management
| Posting date: | 09 February 2026 |
|---|---|
| Salary: | £57,245 per year |
| Hours: | Full time |
| Closing date: | 22 February 2026 |
| Location: | Newport, Wales |
| Remote working: | Hybrid - work remotely up to 2 days per week |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 447804 |
Summary
The main things you will be doing are:
Lead a strategic review of the Commission’s information rights operational function, effectively designing and implementing all of the recommendations from said review.
Lead the Commission’s information rights service, ensuring requests are responded to in a timely manner in compliance with statutory targets and are robustly considered, maintaining the Commission’s Publication Scheme, and ensuring internal review cases are considered thoroughly.
Lead the delivery of the Commission’s Privacy Compliance Framework. This will include identifying and implementing controls to develop a culture of Privacy by Design, enhancing the Commission’s data incident management procedures, and working with key stakeholders in the business to ensure the Commission’s processing of personal data is compliant with UK GDPR principles and any related or future data protection legislation such as PECR and the DUAA.
Overseeing all operations relating to the office of the Data Protection Officer including Data Protection Impact Assessment (DPIA) performance in the team, providing risk-based advice to stakeholders on high-profile DPIAs, advising on processing risks and appropriate controls.
Line management and development of eight personnel charged with delivering the Commission’s data protection and information rights function.
Lead a strategic review of the Commission’s information rights operational function, effectively designing and implementing all of the recommendations from said review.
Lead the Commission’s information rights service, ensuring requests are responded to in a timely manner in compliance with statutory targets and are robustly considered, maintaining the Commission’s Publication Scheme, and ensuring internal review cases are considered thoroughly.
Lead the delivery of the Commission’s Privacy Compliance Framework. This will include identifying and implementing controls to develop a culture of Privacy by Design, enhancing the Commission’s data incident management procedures, and working with key stakeholders in the business to ensure the Commission’s processing of personal data is compliant with UK GDPR principles and any related or future data protection legislation such as PECR and the DUAA.
Overseeing all operations relating to the office of the Data Protection Officer including Data Protection Impact Assessment (DPIA) performance in the team, providing risk-based advice to stakeholders on high-profile DPIAs, advising on processing risks and appropriate controls.
Line management and development of eight personnel charged with delivering the Commission’s data protection and information rights function.
Proud member of the Disability Confident employer scheme
Disability Confident
About Disability Confident
A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident.