Head of Compliance and Data Protection Officer

Yolk Recruitment is delighted to be partnering with Coleg y Cymoedd to appoint a new Head of Compliance and Data Protection Officer.

This is an exciting opportunity to join a college at the heart of its communities, supporting more than 10,000 learners each year across four campuses.

This is a newly created role, established as Coleg y Cymoedd continues to develop its compliance arrangements in response to evolving regulatory requirements and new Medr funding conditions. With future reporting requirements ahead, including the Annual Assurance Return to Medr, this is an opportunity to join at an important point in the college's development and help shape how compliance and data protection operate for the future.

Reporting to the Vice Principal:
Corporate Services, you will lead the college's compliance assurance function while acting as its designated Data Protection Officer (DPO).

You will provide independent oversight and expert advice across regulatory compliance, data protection and information governance, working with senior leaders, the Governing Body and colleagues across the college to ensure the right systems, processes and controls are in place.

• Reviewing the college's current data protection arrangements, including Data Protection Impact Assessments (DPIAs).
• Reviewing policies, procedures and the way information and records are stored and managed.
• Identifying compliance and data protection risks and putting practical solutions in place.
• Considering the implications of increased automation and digital transformation, including the use of AI and automated decision-making.
• Strengthening information governance, records management and compliance processes.
• Supporting the college's preparations for future Medr reporting and assurance requirements.

You will lead compliance with Medr's Regulatory Framework, including its Conditions of Registration and Conditions of Funding, and coordinate the college's Annual Assurance Return to Medr.

• Data protection and information governance
• Subject Access Requests and data breaches
• Freedom of Information requests
• Records management and retention
• Information asset registers
• Data sharing agreements and supplier due diligence
• Complaints and regulatory notifications
• Policy, procedure and institutional compliance
• Insurance and risk management
• Regulatory and performance reporting

As DPO, you will provide advice on UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025, oversee DPIAs, Subject Access Requests, data breaches and ICO correspondence, and maintain the college's wider information governance framework.

You will also provide evidence-based reporting and advice to senior leaders, Boards and Committees.

We are looking for an experienced compliance and/or data protection professional who can operate confidently within a regulated environment.

You will bring:

• Degree-level qualification (or equivalent professional experience) in a relevant discipline such as law, information governance, compliance, or a related field.
• A recognised data protection qualification (BCS Practitioner Certificate, ISEB Certificate in Data Protection or IAPP CIPP/E), or willingness to obtain one within 6 months of appointment, supported by the College and required to pass probation.
• Substantial experience as a Data Protection Officer or in a senior data protection or compliance role within a regulated environment.
• Experience leading or managing data protection and compliance within a regulated organisation.
• Experience advising senior leaders, executive teams and governing bodies on regulatory, data protection and information governance matters.
• Experience developing compliance frameworks,…