Data Compliance Officer — Hybrid, Shape a Data-Driven Charity

Blue Cross For Pets; Burford; Hybrid; GBP 35,000 - 38,000; Full time

Benefits offered by this job

Holiday entitlement

Wellbeing programs

GP access

Health cash plan

Pension scheme

CPD support

Life assurance

Pet insurance discount

Family friendly policies

Volunteer days

Employee discounts

Job summary

Blue Cross in Burford is recruiting a Data Compliance Officer to join the Data & Insights team. You will be the data compliance SME, ensuring our data practices, marketing activities and fundraising operations comply with DMA, PECR, UK GDPR, and our Data Protection Act.

This hybrid role requires you to work from Burford office twice weekly, translate complex regulations into practical guidance, and support risk management across marketing, fundraising and digital projects.

Qualifications

• In-depth working knowledge of Direct Marketing Association code (DMA) and Privacy and Electronic Communications Regulations (PECR)
• A good working knowledge of UK GDPR and practical application, including DPIAs and Subject Access Requests
• Excellent interpersonal skills and ability to explain complex issues clearly to non-experts
• Ability to work with diverse teams to find compliant solutions and influence outcomes
• Confidence to highlight risks and elevate them when necessary
• Strong attention to detail and alignment with Blue Cross values

Responsibilities

• Provide clear, practical compliance guidance to marketing, fundraising and digital teams.
• Collaborate with the DPO and Information Services to maintain alignment with data protection regulations.
• Assist with Subject Access Requests, data incidents, DPIAs and auditing third-party data handling.

Skills

DMA code & PECR

UK GDPR principles

Clear communication

Collaborative mindset

Job description

Blue Cross in Burford is recruiting a Data Compliance Officer to join the Data & Insights team. You will be the data compliance SME, ensuring our data practices, marketing activities and fundraising operations comply with DMA, PECR, UK GDPR, and our Data Protection Act.

This hybrid role requires you to work from Burford office twice weekly, translate complex regulations into practical guidance, and support risk management across marketing, fundraising and digital projects.