Join Our Team: Data Protection Officer

Join our Assurance division as a Data Protection Officer.

Working Hours & Travel

This role follows a 37-hour, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required.

Role Overview

As the Trust’s Data Protection Officer, you will provide expert, independent leadership on data protection, privacy and the responsible use of personal information. Acting as the Trust’s senior specialist adviser, you will support and challenge colleagues at all levels to ensure data protection risks are effectively identified, managed and monitored.

You will oversee compliance with data protection legislation and internal policies, champion privacy by design across projects and services, and serve as the Trust’s key contact for the Information Commissioner’s Office. Working across our charitable, operational, fundraising, volunteering, employment and digital activities, you will help ensure personal information is handled lawfully, transparently and responsibly while enabling innovation, informed decision-making and organisational change.

Key Responsibilities

• Provide independent oversight and assurance on the Trust’s compliance with data protection legislation, regulatory guidance and internal policies.
• Lead the development and delivery of a risk-based data protection assurance programme, identifying key privacy risks and recommending improvements.
• Act as the Trust’s primary point of contact with the Information Commissioner’s Office (ICO), managing regulatory enquiries, notifications and communications.
• Oversee the management of data subject rights requests and information rights processes, ensuring compliance with statutory requirements and timescales.
• Provide expert guidance on personal data breaches and incidents, including risk assessment, reporting obligations, investigations and corrective actions.
• Advise on data sharing, supplier relationships, international data transfers and third-party processing arrangements, ensuring appropriate safeguards are in place.
• Champion privacy by design and oversee Data Protection Impact Assessments (DPIAs) for new projects, systems, services and organisational changes.
• Provide strategic advice to senior leaders on data protection risks, digital transformation initiatives, emerging technologies and the responsible use of data.
• Support the Trust to make informed, compliant and proportionate decisions that balance innovation with privacy and regulatory requirements.
• Lead the development of data protection awareness, training and guidance programmes, fostering a positive culture of accountability and compliance across the Trust.
• Monitor emerging legislation, regulatory developments and best practice, ensuring the Trust’s data protection framework remains effective and up to date.
• Promote transparency, trust and the responsible management of personal information across all areas of the Trust’s charitable, operational, employment, volunteering, fundraising and digital activities.