The Role

Reporting to the Legal Counsel and Bursar, you will serve as a key adviser on compliance, data protection, and risk. You will balance technical legal rigour with a practical understanding of school life, ensuring that our administrative frameworks are as excellent as our academic ones.

Your key responsibilities include:

Data Protection & Compliance

• GDPR Lead: Acting as the primary day-to-day contact for all data protection matters, ensuring full compliance with UK GDPR and the Data Protection Act.
• Process Management: Overseeing Data Protection Impact Assessments (DPIAs), managing Subject Access Requests (SARs), and handling any data breaches with the ICO.
• Culture & Training: Organizing the GDPR Committee and delivering staff training to foster a proactive culture of data awareness across the College and The Pilgrims’ School.

Risk Management & Policy Coordination

• System Administration: Supporting the Bursar in implementing a new risk management software solution and serving as its senior administrator.
• Risk Mitigation: Monitoring and escalating mitigation actions to ensure the College and its subsidiaries remain resilient.
• Central Repository: Establishing a central online repository for all policies, managing review schedules, and ensuring strict version control.

Legal & Secretarial Support

• Company Secretarial: Providing support for the School’s trading subsidiaries, including board paper preparation and Companies House filings.
• Complaint Oversight: Managing the internal formal complaints process, ensuring all cases are logged and tracked in line with ISI requirements.
• Governance Records: Taking minutes for Governing Body Committees and other formal proceedings (disciplinary, grievance, or investigatory) as required.

About You

The successful candidate will be a strategic thinker who isn't afraid to be "hands-on." You should be comfortable navigating complex legal frameworks while maintaining the empathy and discretion required in a close-knit educational community.

Essential Skills & Qualities

• Academic Background: Educated to degree level (or equivalent).
• Framework Expertise: Experience interpreting and applying legal or regulatory frameworks, ideally within the education or charity sectors.
• Information Governance: Strong knowledge of data protection law and best practices in information governance.
• Communication: Excellent written English and the ability to influence senior stakeholders with clarity and impartiality.
• Discretion: The ability to handle sensitive and complex issues with absolute fairness and confidentiality.
• Detail-Oriented: Meticulous attention to detail, particularly regarding policy version control and minute-taking.

Desirable

• Data protection certifications (e.g., IAPP, CIPP/E).
• Experience with risk management software or formal policy review cycles.
• Legal or paralegal qualifications.

What We Offer

• Start Date: Flexible, with a preference for the successful candidate to commence as soon as possible.
• Salary: A competitive salary between £30,000 and £35,000 per annum, depending on qualifications and experience.
• Hours of Work: This is primarily a full-time role (37.5 hours per week); however, part-time working may be considered for the right candidate.
• Professional Impact: The chance to shape a new role and establish governance standards for a globally recognized institution.

HOW TO APPLY

Only applications completed on the school website will be accepted. Please attach a full CV with your application.

Please note that applications will be dealt with as they arrive. Winchester College reserves the right to appoint before the deadline passes.

Closing date for applications: Midnight Wednesday 1st April 2026

For the full job description and to apply please see here.

If you have any questions about this vacancy or the recruitment process, please email recruitment@wincoll.ac.uk.