Data Protection Co-Ordinator

Confidential; Cheltenham; Hybrid; GBP 30,000 - 35,000; Full time

Job summary

Marley Risk Consultants in Cheltenham is seeking a Data Protection Co-Ordinator to support the Data Protection Officer in meeting UK GDPR obligations. The role involves co-ordinating DSARs, maintaining data protection logs and registers, and monitoring deadlines in a hybrid Cheltenham environment.

You will handle sensitive information, gather information securely across teams and assist with DPIAs and data breach assessments, ensuring an auditable, compliant process aligned with the DPO's

Qualifications

• Practical knowledge of UK GDPR and Data Protection Act 2018.
• Experience supporting DSARs, logging and responses.
• Experience handling sensitive information securely.
• Experience recording and escalating data breaches; contributing to DPIAs.
• Experience using MS 365 for records and audit trails.

Responsibilities

• Administer DSARs, log requests, track deadlines and maintain audit trails.
• Gather information across teams using approved secure methods.
• Review documents for redaction or exemption; escalate to DPO as needed.
• Prepare accurate, timely DSAR responses for approval.
• Maintain data protection logs: breaches, DPIAs, DSARs.
• Manage Data Protection inbox, triage and record actions.
• Identify urgent or high-risk matters and escalate appropriately.
• Prepare case folders and check completeness; notify DPO of gaps.
• Assist with initial breach recording and DPIA assessments.
• Support routine data protection queries and staff awareness activities.

Skills

Organisational skills

Attention to detail

Communication skills

Independent working

Discretion and confidentiality

Stakeholder management

Team collaboration

Problem solving

Prioritisation

Risk awareness

Tools

Microsoft 365

Case & document management systems

Job description

Data Protection Co-Ordinator

Location: Cheltenham / Hybrid

Salary: £30-35k

What You'll Be Doing

Working alongside the Data Protection Officer, you'll support Marley Risk Consultants in meeting its obligations under the UK GDPR and Data Protection Act 2018. You'll co-ordinate Data Subject Access Requests, maintain accurate data protection records and registers, support Data Protection Impact Assessments and monitor the Data Protection inbox.

You'll help ensure requests, enquiries and potential incidents are logged, progressed and retained correctly. Working across the business, you'll gather information securely, monitor statutory deadlines, identify gaps or risks and elevate urgent, sensitive or higher-risk matters promptly to the Data Protection Officer.

This is a great opportunity for someone who is highly organised, detail-focused and confident handling sensitive information. You'll combine practical data protection knowledge with strong administration and communication skills, helping maintain a clear audit trail and a consistent approach to privacy compliance.

Key Responsibilities

• Support the day-to-day administration of Data Subject Access Requests, ensuring requests are logged accurately, statutory deadlines are tracked, a clear audit trail is maintained and risks of delay are escalated.
• Work with teams across the organisation to identify and gather information required for DSAR responses using approved systems and secure handling methods.
• Review documents and identify information that may require redaction or exemption, referring final decisions and approval to the Data Protection Officer.
• Assist with reviewing DSAR material and preparing accurate, complete and timely responses for approval.
• Maintain accurate data protection logs and registers, including the personal data breach log, DPIA register and DSAR log, checking for missing, overdue or inconsistent entries.
• Monitor and manage the Data Protection inbox by triaging correspondence, recording actions, assigning or escalating matters and retaining completed items appropriately.
• Identify urgent, sensitive or higher-risk matters, including potential personal data breaches, complaints, regulatory correspondence and requests approaching statutory deadlines.
• Prepare complete case folders, check them against relevant records and promptly notify the Data Protection Officer of missing information, correspondence or actions.
• Support the initial recording and assessment of suspected personal data breaches, ensuring relevant information is captured and escalated in line with procedure.
• Support routine data protection queries, staff guidance, awareness activities and DPIAs, referring matters requiring formal advice or decision-making to the Data Protection Officer.

What We’re Looking For

We’re looking for someone who can manage detailed administrative processes, protect confidential information and keep accurate records while working to statutory deadlines. You’ll be methodical, proactive and comfortable working independently within agreed procedures, with the judgement to recognise when escalation is required.

Experience

• Practical knowledge of the UK GDPR, the Data Protection Act 2018 and secure personal data handling principles.
• Experience supporting or managing DSARs, including logging, information gathering, review, redaction, deadline monitoring and preparation of responses.
• Experience handling sensitive and confidential information securely within organisational systems.
• Experience supporting the recording, initial assessment and escalation of suspected personal data breaches and contributing to DPIAs.
• Experience working across business areas to obtain, review and organise information within agreed timescales.
• Experience using Microsoft 365 or similar case and document-management systems to maintain accurate records, actions and audit trails.

Skills & Expertise

• Strong organisational and administrative skills, excellent attention to detail and the ability to prioritise competing deadlines.
• Clear and professional written and verbal communication skills.
• Practical understanding of DSAR administration, secure information handling, redaction principles, statutory deadline monitoring and accurate record keeping.
• Confidence using Microsoft 365 and associated workflow tools.
• The ability to work independently within agreed procedures and recognise when formal advice or escalation is required.
• A discreet, dependable and collaborative approach to sensitive information and stakeholder relationships.
• Knowledge of DPIAs, records of processing activities, personal data breach management and ICO guidance is desirable.

Why Join Marley Risk Consultants?

At Marley, we’re passionate about creating an environment where our people can make an impact, develop their expertise and help shape the way we work.

This is an opportunity to build practical experience across a broad range of data protection activity while supporting a function that protects individuals, strengthens governance and enables responsible business decisions. You’ll be encouraged to contribute ideas, improve processes and help embed good data protection practice across the organisation.

You’ll be joining a collaborative business where your voice matters, with opportunities to learn, develop and build your career alongside people committed to doing the right thing.

If you’re looking for a role where you can make a difference, take ownership and support a strong culture of privacy and accountability, we’d love to hear from you.