Quality Systems Lead

Role overview

Location and schedule

• Fully onsite at Eastern Business Park, St Mellons, Cardiff, five days a week.
• Full-time, Monday to Friday, 8:30am–5:00pm.

Pay

• Starting salary is £35,000–£45,000 depending on experience, plus performance bonus.

Quality, governance and improvement

• Lead implementation and continual improvement of quality and information security management systems, alongside B Corp-aligned objectives.
• Manage the Annual Order of Business cycle, including recurring reporting, governance activities, owners, deadlines and completion tracking.
• Coordinate policy drafting, consultation, approval, version control, review and communication with policy owners.
• Lead internal audits; coordinate auditors, report findings and verify corrective actions.
• Coordinate external audits, certification activity and management reviews; maintain evidence of compliance, performance and progress.
• Identify gaps, map processes, define requirements and deliver improvements across departments.
• Track risks, non-conformities and improvement actions; report progress and escalate overdue actions or significant concerns.

Data protection duties

• Lead day-to-day data protection compliance with the Data Protection Officer, leadership team and relevant specialists.
• Maintain data maps, records of processing activities and retention schedules.
• Coordinate data protection impact assessments and embed privacy into new systems, projects and business process changes.
• Manage operational responses to individual rights requests and personal data incidents, including investigation and escalation.
• Review supplier and customer data protection arrangements, monitor developments, and provide practical guidance and training.

What the employer is looking for

• Practical experience in at least one relevant area: compliance, quality systems, data protection, auditing, policy coordination, project support or business process improvement.
• Willingness to learn, own development and seek guidance where needed.
• Strong organisation, accurate record-keeping, deadline coordination and follow-through.
• Analytical and practical approach to understanding and improving processes.
• Clear written and verbal communication; confidence working across teams and following up with colleagues.
• Attention to detail, sound judgement and responsible handling of confidential information.

Useful additional experience

• Familiarity with ISO 9001, ISO 27001 or other management systems is useful.
• Understanding of UK GDPR or experience supporting data protection activities is useful.
• Experience supporting internal audits, risk assessments, corrective actions, policy reviews, governance schedules or compliance documentation is useful.
• The source description ends during a further item about project coordination and business analysis experience.