Data Protection Officer – Hybrid (Mid Sussex)

About the role

We are looking for an experienced Data Protection Officer to provide independent oversight of the Council’s compliance with data protection legislation and information governance requirements. Reporting to the Assistant Director – Governance, the role is hybrid, with one day per week on site at RH16 1SS.

Key responsibilities

• Act as the Council’s designated DPO in line with Articles 37‑39 of the UK GDPR.
• Provide expert advice to elected members, senior management and officers on data protection and privacy obligations.
• Monitor organisational compliance through policies, procedures, training programmes, audits and assurance reporting.
• Oversee Data Protection Impact Assessments (DPIAs), Records of Processing Activities (ROPAs) and data‑sharing arrangements.
• Support and oversee the Council’s Freedom of Information (FOI) function.

Required profile

• Proven experience as a Data Protection Officer or in a senior data‑privacy role.
• Strong knowledge of UK GDPR, data protection legislation and information governance.
• Ability to work independently and act as the principal point of contact with the ICO.
• Excellent communication skills for advising senior stakeholders.

Required skills

• In‑depth knowledge of UK GDPR and data protection legislation.

What we offer

• Negotiable rate dependent on experience.
• Hybrid working model with one day per week on site.
• Opportunity to influence data governance within a public sector organisation.