Data Protection Officer

Join Our Team: Data Protection Officer

Join our Assurance division as a Data Protection Officer.

Working Hours & Travel

This role follows 37 hours, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required.

Role Overview

As the Trust’s Data Protection Officer, you will provide expert, independent leadership on data protection, privacy and the responsible use of personal information. Acting as the Trust’s senior specialist adviser, you will support and challenge colleagues at all levels to ensure data protection risks are effectively identified, managed and monitored.

You will oversee compliance with data protection legislation and internal policies, champion privacy by design across projects and services, and serve as the Trust’s key contact for the Information Commissioner’s Office. Working across our charitable, operational, fundraising, volunteering, employment and digital activities, you will help ensure personal information is handled lawfully, transparently and responsibly while enabling innovation, informed decision-making and organisational change.

Key Responsibilities

• Provide independent oversight and assurance on the Trust’s compliance with data protection legislation, regulatory guidance and internal policies.
• Lead the development and delivery of a risk-based data protection assurance programme, identifying key privacy risks and recommending improvements.
• Act as the Trust’s primary point of contact with the Information Commissioner’s Office (ICO), managing regulatory enquiries, notifications and communications.
• Oversee the management of data subject rights requests and information rights processes, ensuring compliance with statutory requirements and timescales.
• Provide expert guidance on personal data breaches and incidents, including risk assessment, reporting obligations, investigations and corrective actions.
• Advise on data sharing, supplier relationships, international data transfers and third-party processing arrangements, ensuring appropriate safeguards are in place.
• Champion privacy by design and oversee Data Protection Impact Assessments (DPIAs) for new projects, systems, services and organisational changes.
• Provide strategic advice to senior leaders on data protection risks, digital transformation initiatives, emerging technologies and the responsible use of data.
  
• Support the Trust to make informed, compliant and proportionate decisions that balance innovation with privacy and regulatory requirements.
• Lead the development of data protection awareness, training and guidance programmes, fostering a positive culture of accountability and compliance across the Trust.
• Monitor emerging legislation, regulatory developments and best practice, ensuring the Trust’s data protection framework remains effective and up to date.
• Promote transparency, trust and the responsible management of personal information across all areas of the Trust’s charitable, operational, employment, volunteering, fundraising and digital activities.

About You

• Significant experience working in data protection, privacy or information governance within a large or complex organisation.
• Experience providing Executive and Board-level advice and challenge on significant data protection and privacy risks.
• Experience leading or providing professional direction to data protection or information governance specialists.
• Experience managing complex DPIAs, data breaches, information rights matters and regulatory engagement.
• Experience working with IT, Digital, Procurement, Legal and operational teams on privacy risks arising from technology, systems and third-party arrangements.

Knowledge & Skills

• Expert knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR.
• Good understanding of wider information governance, information rights and records management requirements.
• Strong understanding of data protection risks arising from digital transformation, artificial intelligence, automated processing, information security, surveillance, employee data and fundraising.
• Strong analytical and risk-assessment skills, with the ability to distinguish material risk from theoretical or low-level compliance issues.
• Excellent communication and influencing skills, with the confidence to challenge senior stakeholders appropriately and explain complex issues in clear, practical language.
• Ability to exercise independent judgement while working collaboratively across the organisation.
  Relevant professional data protection or privacy qualification, or equivalent demonstrable expertise.

Contact & Application

If you have any questions, feel free to reach out to us at CRT.recruitment@canalrivertrust.org.uk.  We encourage early applications as we may close the vacancy once we receive enough suitable candidates.

What We Offer

In addition to your annual base salary of £75,000 - £85,000 dependant on experience. We also offer a competitive pension scheme, increasing holiday entitlement, and a range of employee benefits. For a full breakdown of our benefits, check out our brochure here: EVP - 1.  

Learn more: https://canalrivertrust.org.uk/about-us/work-for-us/our-benefits 

#INDHP