British Gymnastics
Data Protection Partner
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Gymnastics isn’t just a sport—it’s a powerful force for change.
We believe in the power of gymnastics to change lives, enrich communities, and deliver an uplifting gymnastics experience for all across the UK.
At the heart of this are the people who make up the gymnastics community – gymnasts, parents, coaches, clubs, officials, and volunteers – working together in communities across the country. As the national governing body for gymnastics in the UK, we work in partnership with our members to lead, support, and inspire, helping to shape a bright future for our sport.
Our vision, Leap Without Limits, is underpinned by the values of being Aspirational, Supportive, and Inclusive. Together, we’re building a sport where everyone feels welcomed, encouraged, and able to thrive. This role is an important part of making that vision a reality.
The Opportunity
We are looking for a Data Protection Partner to play a pivotal role in embedding and maintaining a robust data protection framework across the organisation. Working closely with our Governance Lead, external Data Protection Officer (DPO), and colleagues across all departments, you will provide practical advice, coordinate compliance activities, and help ensure we meet our obligations under UK data protection legislation.
This is an excellent opportunity for someone with data protection experience who enjoys balancing compliance, stakeholder engagement, and continuous improvement. You will have the chance to influence organisational practices, support meaningful projects, and contribute to creating a safe, inclusive, and well-governed environment for our members, clubs, colleagues, and wider gymnastics community.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Main Responsibilities
The main responsibilities of the role are:
- Act as a key point of contact for day-to-day data protection queries, providing practical advice and guidance across the organisation.
- Manage the relationship with our external Data Protection Officer (DPO), ensuring effective collaboration and appropriate escalation of higher risk matters.
- Lead on more complex data protection queries, supporting managers and stakeholders to make informed, risk-based decisions on the handling of personal data.
- Coordinate and support Data Protection Impact Assessments (DPIAs) for new projects, systems, and organisational initiatives.
- Maintain records of processing activities, data protection registers, and other accountability documentation to demonstrate compliance.
- Manage the handling of data subject rights requests, including Subject Access Requests, ensuring responses are accurate and timely.
- Coordinate investigations into personal data breaches, maintain incident records, identify lessons learned, and support preventative actions.
- Review data processing agreements and support supplier assurance activities to ensure appropriate controls are in place.
- Develop and deliver data protection training, awareness activities, and support networks that promote a positive data protection culture.
- Produce meaningful data protection metrics, reports, and insights for senior leaders and governance forums to support effective decision-making.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About You
We’re looking for someone who can demonstrate:
- Experience supporting data protection compliance activities such as DPIAs, Subject Access Requests, records management, or breach handling.
- A good understanding of UK GDPR, the Data Protection Act 2018, and wider data protection principles.
- Strong analytical skills with excellent attention to detail and a methodical approach to work.
- The ability to manage multiple priorities and maintain accurate records, audit trails, and case documentation.
- Confidence in communicating data protection requirements to a range of stakeholders in a clear and practical way.
- Experience developing reports, policies, guidance notes, or other written documentation.
- Strong organisational and administration skills, together with proficiency in Microsoft 365 applications.
- The ability to interpret legislation, guidance, and policy, applying these in a proportionate and pragmatic manner.
- A collaborative approach and experience building effective working relationships across teams and functions.
- High levels of integrity, discretion, and professionalism when handling confidential and sensitive information.
Role Details
- Salary: up to £35,000 dependent upon experience
- Hours: Full-time, 37 hours per week
- Location: This is a dual-based role working from Lilleshall National Sports Centre, near Newport, Shropshire, and from home
- Contract type: Permanent
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location