Raspberry Pi Foundation
Digital Compliance & Data Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Location: Remote with regular travel to Cambridge
Salary: £41,368.00 - £53,534.00 p.a. full-time equivalent, dependent on experience
Basis: Permanent; full-time, part-time or flexible
Eligibility: You must be eligible to work in the UK
The Role
We are seeking a forward-thinking Digital Compliance & Data Manager to lead, champion, and embed digital compliance and data governance across our digital ecosystem and to provide specialist capacity and expertise to the Foundation's data protection function and designated Data Protection Officer.
This role holds a broad strategic focus on emerging digital and privacy regulations globally, ensuring our digital landscapes spanning cloud platforms, web apps, AI tools, online learning portals, as well as our internal operations, are legally compliant and appropriately structured.
As our subject-matter expert on digital compliance and data protection, you will build compliance understanding across the Foundation, support the design of new products and services, and keep our policies and frameworks current as the law evolves. We are looking for someone who can balance practical, business-enabling advice with the rigour needed to protect the young people and educators we serve, our staff, and our supporters.
Reporting to the Senior Legal Counsel, you will work closely with colleagues within the Legal team and wider Operations Division, as well as with Engineering, Product, and Data team colleagues.
We strive to make the Foundation a place where talented people who care about our mission can do the best work of their careers. We have a flexible and collaborative approach to all aspects of our work. If you're the right person for the job, we'll make it work for you, and you can be confident that you'll be working with an exceptional team.
Responsibilities
- Provide expert advice to ensure the Foundation's compliance with digital and privacy regulation across our core markets (including the UK, EU, US, India, Kenya, and South Africa) - partnering with Engineering, Product, and Data teams to embed Privacy by Design and Default into everyday workflows like sprint planning and design reviews, coordinating DPIAs and other assessments required for higher-risk processing (particularly involving children's data, AI, and online platforms), and providing expert advice to senior stakeholders, including the Foundation's designated Data Protection Officer, on higher-risk matters
- Track, interpret, and coordinate the Foundation's response to emerging digital and privacy regulation globally, and provide clear, proportionate risk assessments on the adoption of novel technologies such as generative AI, cloud migrations, and automated grading/analytics systems, collaborating across the RPF Group
- Own and continuously improve the Foundation's broader information governance framework: review and continuously iterate our information security, data retention, and data privacy policies; maintain and manage the Record of Processing Activities and underlying organisational data map, and conduct periodic reviews of key data processors and third-party suppliers to ensure appropriate contractual protections are in place
- In collaboration with the People & Culture team, manage the Foundation's response protocols for data subject access requests (DSARs), and lead investigation, mitigation, and reporting procedures for potential data breaches and data-related complaints
- Design and deliver practical, impactful, modern compliance and data privacy training tailored to software developers, educators, researchers, and operational teams across the Foundation, and continue to build a collaborative culture of transparency and accountability where compliance is understood by every team as a key component of digital child protection, safeguarding, and children's digital rights
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Experience And Personal Attributes
We recognise that everyone has the potential for growth, and we welcome applications from candidates who can demonstrate that they have some, but not all, of the experience and personal attributes listed here.
- A recognised data protection qualification (for example CIPP/E, CIPM, the Practitioner Certificate in Data Protection), or an equivalent legal or compliance qualification
- Strong working knowledge of privacy regimes including UK GDPR, the Data Protection Act 2018, US legislation, as well as practical experience of applying them in an operational setting
- In-depth knowledge of children's online privacy and familiarity with the ICO's Age Appropriate Design Code (Children's Code)
- Digital and technical literacy: a strong understanding of modern software paradigms, including APIs, cloud architecture (AWS/GCP), cookies/trackers, SDKs, and data pipelines. You don't need to code, but you must confidently discuss architectures with engineers
- Experience in an international organisation handling multi-jurisdictional data transfers (UK, EU, USA, India, Kenya, and South Africa)
- Experience of working within a small-medium sized business and with user-centred agile software development teams
- Familiarity with compliance frameworks related to AI governance, ethical machine learning, and accessibility
- Excellent communication skills, with the ability to translate legal requirements into practical, accessible guidance that non-specialist colleagues can act on
- A collaborative instinct - you see compliance as something teams own, not something done to them, and you're comfortable being in the room for workshops, planning sessions, and design reviews, bringing compliance expertise into the conversation as it happens
- Experience in the charity or edtech sectors
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About Us
The Raspberry Pi Foundation is an independent charity with a global mission to enable all young people to realise their full potential through the power of computing and digital technologies.
We empower schools to teach computer science and AI literacy through free curricula, classroom resources, purpose-built software tools, and professional development for teachers. We inspire young people to become tech creators through the world's largest networks of coding clubs. We undertake original research that informs our work and which we use to advance the field of computer science education more broadly.
All of our resources and learning experiences are available for anyone to use at no cost. We are particularly focused on creating opportunities for young people who experience educational disadvantage and those who come from backgrounds traditionally underrepresented in technology industries.
Over the past decade, we have supported hundreds of thousands of educators and tens of millions of students. We have teams in six countries (India, Ireland, Kenya, South Africa, the UK, and US) and partnerships with mission-aligned non-profit organisations in over 60 countries.
We are at the forefront of the global educational movement to expand access to computer science education and AI literacy. You can learn more about our work in our latest Annual Report.
Benefits
In addition to competitive salaries, we offer a range of benefits for all of our colleagues, including:
- 25 days' annual leave initially, growing to 30 days after five years of service
- Company-wide close down for 3 days at the end of the year
- Generous company pension scheme with 8% employer and 4% employee contributions
- Private healthcare
- Life assurance and long-term illness insurance policy
- Investment in professional development and learning
- Flexible work hours as needed, to fit around childcare or other commitments
- Generous family leave policy
- Cycle-to-work scheme and season ticket loan
Timetable for Applications
- Closing date: 16th October 2026 17.00 GMT
- Phone screen: Week commencing 26th October 2026
- First-round interview: Week commencing 9th November 2026
- Second-round interview: Week commencing 23rd November 2026
We are committed to safeguarding and promoting the welfare of children and young people, and we expect all staff and volunteers to share this commitment. If successful in the selection process, you will be required to undergo a background check to confirm that you are a suitable person to work with children. Further background checks will be made at regular intervals thereafter.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location