Job Description

Job description
Vacancy: Data Protection Officer



Closing date: Sunday 19 October 2025



Shortlisting: Monday 20 October 2025



Proposed Interview date: Week Commencing Monday 27 October 2025



Salary: 49,698

About

the vacancy:

We are looking to hire a Data Protection Officer (DPO) to lead Hedyn's data protection service, ensuring compliance with UK Data Protection Regulations and associated data protection legislation in processing personal data. The role is focused is on providing and maintaining a suitable data protection and information management framework using the principles of Privacy by Design.



The role will assure provision of expert advice and guidance to Hedyn colleagues and customers on all the requirements of UK GDPR and Data Protection Act 2018, monitoring trends and best practice across the sector, and keeping up to date with developments in Data Protection legislation and its implication for Hedyn. The DPO is responsible for monitoring and reporting on Hedyn's data protection compliance. They will be the point of escalation for data subjects and for co-operating and consulting with national supervisory authorities such as the Information Commissioner's Office in relation to data protection matters.

Specifically, in the role you will:

Register with the Information Commissioner's Office as the named Data Protection Officer for Tai Hedyn Ltd. Stay updated on regulatory changes and emerging trends, adjusting compliance strategies as necessary to ensure ongoing adherence to regulatory requirements. Contribute to the organisation's regulatory compliance function, ensuring strict adherence to applicable laws, regulations, and industry standards. Develop Hedyn's data protection service to ensure compliance with all relevant UK Data Protection Regulation. Develop, maintain, review and monitor suitable policy and procedures around data protection and information management to provide a consistent and appropriate data protection service. Assist on regulatory matters to ensure compliance across Hedyn and assist colleagues with their compliance concerns. Design and undertake comprehensive data audits to provide assurance to Hedyn leadership and Board on compliance with legislation and regulation. Conduct data protection impact assessments (DPIAs) with colleagues to implement a Privacy by Design approach. Develop and manage accurate records of data processing activities (RoPA) for effective delivery of data protection services and audit logs. Manage data protection metrics to provide Hedyn with effective management information and take action where necessary. Manage requests for personal data (Subject Access Requests and other information requests) in line with UK data protection regulation to comply with UK data protection regulation. Conduct confidential investigations of personal data breaches to mitigate impact and understand root cause to provide information for colleagues to take action and learn. Develop, deliver and evaluate mandatory colleague and Board member training and annual data protection awareness campaigns to empower colleagues to protect personal data. Assure compliance with data protection legislation and foster a data protection culture which encourages compliance by design. Provide expert advice, guidance, and information to the association, including senior colleagues and Board members and those processing its personal data, regarding their legal and regulatory obligations. Deal with complex or high value data protection problems in conjunction with senior colleagues within Hedyn and to obtain specialised advice tailored to Hedyn's specific needs to include helping managers make pragmatic well informed and prompt decisions. Liaise with the Information Commissioners Office on matters of data protection.

(Please refer to the attached role profile for more information.)





For further information about the role, please contact recruitment@hedyn.wales

Application Process:

We require an application form to be completed for every role.



We do not require recruitment agency support at this time - all speculative CV's will be treated as a direct application.

Your Hedyn, our comprehensive benefits package:

We believe Hedyn is a great place to work and it's important to us that our people feel the same way.



As well as offering varied and fulfilling careers, we want every colleague to feel appreciated. That means having the best possible benefits package, the flexibility to maintain a great work-life balance and the opportunity to achieve your full potential.

Enhanced Pension Scheme:

We offer an attractive pension scheme with generous employer contributions.

Enhanced Annual Leave:

You'll start on 25 days annual leave (+ Bank Holidays) which would increase to 30 days following 3 years' service.

Agile Working Policy (dependent on role):

Hedyn work with the philosophy that 'work is something you do rather than somewhere you go.'

Health and Wellbeing:

We have many health and wellbeing policies and initiatives such as Cycle to Work and Enhanced Maternity/Paternity/Adoption.

Development:

We offer many professional and personal development options such as paying for professional membership, sponsored study opportunities and career progression and development.



We want you to be at your very best. Please feel free to let us know of any changes we can make at any point in the recruitment process that will help support your application.



If you are looking for your next career challenge, seeking responsibility, and are passionate about delivering the best possible service, we'd love to hear from you.