Head of Information Compliance and Deputy DPO

Head of Information Compliance and Deputy DPO

Department for Transport

Apply before 11 : 55 pm on Monday 9th February 2026

Location : Birmingham, Hastings, Leeds, Swansea (Hybrid)

Salary : £69,501 - A Civil Service Pension with an employer contribution of 28.97%

Contract Type : Permanent – Flexible working, Full-time, Job share, Part-time

As Head of Information Compliance and Deputy DPO, you’ll play a pivotal role in supporting the Data Protection Officer in fulfilling their statutory tasks and leading a network of data protection practitioners across the DfT group. You’ll have oversight of compliance across the entire controllership and work closely with the DPOs in DfT’s arms’ length bodies (e.g., HS2 Ltd, National Highways, DfTO, Network Rail).

This is your opportunity to tackle a wide range of challenges:

• Ensuring the highest privacy standards in how we use and share personal data to deliver modern, joined-up services
• Advising on the use of data for research and policy development
• Navigating the privacy and ethical considerations associated with the use of emerging technologies in transport
• Overseeing compliance with wider information rights and records management legislation
• Leading a team based across multiple office locations effectively

• Advising staff and managers at all levels on compliance with data protection and information rights law
• Supporting the DPO in ensuring their statutory tasks are carried out efficiently and to a high standard
• Staying abreast of government strategy, legislation, guidance, and associated case law relevant to information management, information rights and data protection
• Engaging with cross-government data protection networks and policy leads
• Managing a multi-functional team covering Data Protection, FOI, Knowledge & Information Management, and eDiscovery
• Championing transparency and ensuring quality responses to information rights requests
• Overseeing complex casework and engaging with the Information Commissioner’s Office on policy measures and innovative solutions involving personal data
• Identifying, assessing, and managing compliance risks, ensuring effective mitigation and associated governance reporting
• Developing and maintaining policies and procedures to support compliance, and monitoring their effectiveness

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

To be successful in this role you will need to have the following experience :

• Expert knowledge of relevant laws and associated guidance covering data protection, Freedom of Information and the Public Records Act
• Proven track record of advising on complex privacy and data governance matters to provide robust, risk-based, solutions
• Experience in leading multi-disciplinary teams, balancing individual priorities whilst maintaining clear strategic overview
• Excellent communication and interpersonal skills, with an ability to explain complex issues in a way that is easy to understand
• Extensive experience of having built and maintained effective working relationships with a range of stakeholders to improve compliance
• Awareness of the technological landscape, and the tools and platforms used to store and share information
• A good understanding of information and cyber security risk management

• Applicants must hold an industry-recognised practitioner qualification in data protection

You will be required to provide evidence that you hold any essential qualifications at some point during the recruitment process. If you cannot provide evidence, your application will be withdrawn.

Read the full job description and apply at Civil Service Jobs using the link provided.

This Final date to receive applications at 23 : 55 on Monday 9th February 2026