Data Protection Partner

What we're looking for?

We are looking for a Data Protection Partner to play a pivotal role in embedding and maintaining a robust data protection framework across the organisation. Working closely with our governance lead, external Data Protection Officer (DPO) and colleagues across all departments, you will provide practical advice, coordinate compliance activities and help ensure we meet our obligations under UK data protection legislation.

About you

This is an excellent opportunity for someone with data protection experience who enjoys balancing compliance, stakeholder engagement and continuous improvement. You will have the chance to influence organisational practices, support meaningful projects and contribute to creating a safe, inclusive and well governed environment for our members, clubs, colleagues and wider gymnastics community.

We’re looking for someone who can demonstrate:

• Experience supporting data protection compliance activities such as DPIAs, Subject Access Requests, records management or breach handling.
• A good understanding of UK GDPR, the Data Protection Act 2018 and wider data protection principles.
• Ability to prepare data protection metrics and management information (e.g., DSAR volumes, breach trends, DPIA status, training completion) to support Board reporting.
• Relevant practical experience ideally in, data protection supporting core data protection processes (e.g., DPIAs, ROPA maintenance, data subject requests, and personal data breach management), or demonstrable ability to learn these quickly.
• Strong organisational and administration skills, together with proficiency in Microsoft 365 applications.
• High levels of integrity, discretion and professionalism when handling confidential and sensitive information.
• Strong analytical skills with excellent attention to detail and a methodical approach to work.
• The ability to manage multiple priorities and maintain accurate records, audit trails and case documentation.
• Confidence communicating data protection requirements to a range of stakeholders in a clear and practical way.
• Experience developing reports, policies, guidance notes or other written documentation.
• The ability to interpret legislation, guidance and policy, applying these in a proportionate and pragmatic manner.
• A collaborative approach and experience building effective working relationships across teams and functions.

Key Responsibilities:

• Act as a key point of contact for day to day data protection queries, providing practical advice and guidance across the organisation.
• Manage the relationship with our external Data Protection Officer (DPO), ensuring effective collaboration and appropriate escalation of higher risk matters.
• Lead on more complex data protection queries, supporting managers and stakeholders to make informed, risk based decisions on the handling of personal data.
• Coordinate and support Data Protection Impact Assessments (DPIAs) for new projects, systems and organisational initiatives.
• Maintain records of processing activities, data protection registers and other accountability documentation to demonstrate compliance.
• Manage the handling of data subject rights requests, including Subject Access Requests, ensuring responses are accurate and timely.
• Coordinate investigations into personal data breaches, maintain incident records, identify lessons learned and support preventative actions.
• Review data processing agreements and support supplier assurance activities to ensure appropriate controls are in place.
• Develop and deliver data protection training, awareness activities and support networks that promote a positive data protection culture.
• Produce meaningful data protection metrics, reports and insights for senior leaders and governance forums to support effective decision making.

If you are motivated to support responsible data management and uphold the highest privacy standards, we encourage you to apply.

Unfortunately, visa sponsorship is not available for this role. Applicants will need to have the appropriate right to work in the UK for the duration of their employment.