Data Protection Officer and Information Governance Manager

The Role

The West of England Mayoral Combined Authority (MCA) is seeking to appoint an experienced Data Protection Officer and Information Governance Manager to join our Legal and Governance team to provide independent oversight and expert advice on compliance with the UK GDPR, the Data Protection Act 2018 and related legislation. This is a great opportunity for an experienced data protection professional who can turn complex legislation into clear, practical advice and help services across the MCA to manage personal data responsibly, fairly and lawfully.

What you’ll be doing

In this key role, you will act as the statutory Data Protection Officer, acting autonomously and independently to carry out statutory duties and lead the MCA in data protection compliance and best practice. Reporting to the Head of Legal Services, your key responsibilities in this role will also include driving a range of strategic information governance projects, providing expert guidance to senior leaders across the organisation on a range of projects, and helping shape a strong, compliant information culture across the organisation. You will take the strategic lead on the Information Governance Framework and all matters of Information Governance, including Data Protection, Information Rights, Freedom of Information and Records Management.

• Ensuring completion of Subject Access Requests and Freedom of Information requests within statutory timeframes.
• Provision of advice on data handling/processing in line with the principles laid down by UK GDPR, DPA.
• Provision of advice and support in the completion of Data Protection Impact Assessments, considering risk implications and mitigation.
• Liaising with partner organisations and suppliers to establish compliant data flows and agreements.
• Advising and supporting in drawing up data sharing agreements and external third-party contracts.
• Dealing with data breaches/incidents, to minimise immediate risks and mitigate future breaches.

What you’ll bring

• Experience in providing expert advice on all matters relating to the Data Protection Act, the UK GDPR, Freedom of Information Act, the Environmental Information Regulations, information security and records management in a large, complex, preferably local government organisation.
• Subject matter expertise in the Data Protection field with an in-depth knowledge and understanding of all relevant legislation and its operational implementation.
• Experience in developing, reviewing, delivering, managing and recommending improvements in policies, procedures, controls, monitoring systems and performance to support effective information governance and data protection.
• Extensive knowledge of Data Privacy Impact Assessments, development and review of Information Sharing Agreements; information risk and records management.
• Experience in dealing with the investigation of data breaches or incidents and the recommendation and implementation of mitigating risk factors.

We’re particularly interested in people with experience of working in the public sector.

Why choose us?

As Data Protection Officer, you will play a central leadership role in how the MCA manages its information as a strategic asset. Influence decision‑making at the highest level. Support major programmes and investments that directly affect the region. Shape a maturing Information Governance framework at a critical stage of development. This is not just a compliance role - it is an opportunity to embed good governance at the heart of regional delivery. This is an opportunity to make a real difference.

If you’d like to have an informal conversation about this opportunity with the manager who’s hiring, you can contact Steven Hellard, Head of Legal Services, steven.hellard@westofengland-ca.gov.uk.

The closing date for this role is midnight on 27th September 2026. The interviews are planned for Monday 26th October and Wednesday 28th October at our offices at 70 Redcliff St, Bristol BS1 6AL, but please note the date may change.

Working arrangements

The Mayoral Combined Authority has a hybrid working approach, which enables employees to split their week between working in the workplace and working remotely. Full‑time employees are required to work in the office for 1 to 2 days a week and can work from home for the remaining days. This approach aims to maintain a work‑life balance while ensuring effective delivery of services. For more information, you can visit the WECA careers page.