Reporting to the Head of Governance, Risk and Compliance, the Compliance and Data Protection Officer is responsible for providing reasoned, reliable opinions and assurance on the effectiveness of controls in place to manage business-wide compliance and data protection risks. Experience, and understanding of Non-disclosure agreements is beneficial to this role.

Client Details

Public Sector Organisation who drives transformational, systematic change in the health and social care sectors to create a better future for the people of Wales. Their role is to inspire innovation and collaboration between industry, health and social care, and research organisations to make a positive difference to people and families across the nation.

Description

MAIN DUTIES & RESPONSIBILITIES:

Compliance:

▪ Responsible for monitoring the company's compliance with all company policies and procedures, ensuring that all team members work within governing rules and regulations.

▪ Provide independent oversight and challenge to team activities through the development and discharge of a programme of compliance monitoring (reviews/audits).

▪ Report outcome of compliance monitoring to appropriate audience, with recommendations to improve or resolve areas of weakness, gaps and/or risks identified.

▪ Coordinate implementation of recommendations liaising with relevant team members to ensure appropriate corrective actions or risk mitigation strategies are implemented within the required time frame.

▪ Assist the Head of Governance, Risk and Compliance to assess and improve the effectiveness, efficiency and quality of internal controls.

▪ Drive a positive compliance culture across the Company by offering pragmatic advice and solutions or procuring specialist advice and training for the team as required.

Data Protection:

▪ Responsible for securing data privacy compliance and ensure that "privacy by design" is embedded within the Company. Work across all areas of the Company in order to deliver the best possible outcome from a privacy prospective.

▪ Produce and regularly review all policies, procedures and guidance relating to Data Protection Act 2018 and GDPR.

▪ Develop and deliver team training and awareness briefings to include the dissemination and promotion of revisions to policy, guidance, procedures and best practice.

▪ Act as the "go to" person to advise team members, contractors/consultants on data protection matters, procuring specialist advice and training as required.

Profile

• High-level understanding and knowledge of compliance and governance in the public sector
• Detailed knowledge of the Data Protection Act 2018 and GDPR
• Ability to build, implement and manage data protection and information/records management frameworks
• Ability to develop, maintain and implement an effective policy review schedule
• Have experience in a compliance role, conducting compliance reviews / audits within the public sector
• Have a working experience and understanding of DPA and GDPR and their compliance requirements
• Experience of developing and implementing policy, process, procedures, and systems
• Good command of written English. Must be able to produce policy, documents, reports and correspondence commensurate to business environment
• Strong communication and inter-personal skills with the ability to work effectively and collaboratively with colleagues and external stakeholders

Job Offer

Salary of £40,000 + Additional benefits

Hybrid home/office working model