Data Protection Coordinator

Marley Risk Consultants Limited; Bishop's Cleeve; Hybrid; GBP 30,000 - 35,000; Full time

Job summary

Marley Risk Consultants is seeking a Data Protection Co-Ordinator to support the Data Protection Officer, ensuring UK GDPR and the Data Protection Act 2018 compliance. You’ll coordinate DSARs, maintain records and registers, and assist with DPIAs amid strict deadlines.

This hybrid role requires strong organisation, discretion with sensitive data, and clear communication as you work across teams to log, escalate and close privacy matters.

Qualifications

• Practical knowledge of the UK GDPR and Data Protection Act 2018.
• Experience supporting DSARs, logging, information gathering, redaction and responses.
• Experience handling sensitive information securely and maintaining records.
• Experience using Microsoft 365 and case/document-management systems.

Responsibilities

• Co-ordinate Data Subject Access Requests and track statutory deadlines.
• Log, progress and retain requests with a clear audit trail.
• Assist with DPIAs and monitor data protection registers and logs.
• Identify gaps or risks and escalate to the Data Protection Officer.
• Support information gathering across teams using secure processes.

Skills

DSAR admin

UK GDPR knowledge

Attention to detail

Independence

Communication

DPIAs

Audit trails

Tools

Microsoft 365

Job description

Data Protection Co-Ordinator

Location: Cheltenham with 2 days hybrid working

What You’ll Be Doing

Working alongside the Data Protection Officer, you’ll support Marley Risk Consultants in meeting its obligations under the UK GDPR and Data Protection Act 2018. You’ll co-ordinate Data Subject Access Requests, maintain accurate data protection records and registers, support Data Protection Impact Assessments and monitor the Data Protection inbox. You’ll help ensure requests, enquiries and potential incidents are logged, progressed and retained correctly. Working across the business, you’ll gather information securely, monitor statutory deadlines, identify gaps or risks and accelerate urgent, sensitive or higher-risk matters promptly to the Data Protection Officer. This is a great opportunity for someone who is highly organised, detail-focused and confident handling sensitive information. You’ll combine practical data protection knowledge with strong administration and communication skills, helping maintain a clear audit trail and a consistent approach to privacy compliance.

• Hybrid
• Yearly salary: £30,000 - £35,000

Key Responsibilities

• Support the day-to-day administration of Data Subject Access Requests, ensuring requests are logged accurately, statutory deadlines are tracked, a clear audit trail is maintained and risks of delay are escalated.
• Work with teams across the organisation to identify and gather information required for DSAR responses using approved systems and secure handling methods.
• Review documents and identify information that may require redaction or exemption, referring final decisions and approval to the Data Protection Officer.
• Assist with reviewing DSAR material and preparing accurate, complete and timely responses for approval.
• Maintain accurate data protection logs and registers, including the personal data breach log, DPIA register and DSAR log, checking for missing, overdue or inconsistent entries.
• Monitor and manage the Data Protection inbox by triaging correspondence, recording actions, assigning or escalating matters and retaining completed items appropriately.
• Identify urgent, sensitive or higher-risk matters, including potential personal data breaches, complaints, regulatory correspondence and requests approaching statutory deadlines.
• Prepare complete case folders, check them against relevant records and promptly notify the Data Protection Officer of missing information, correspondence or actions.
• Support the initial recording and assessment of suspected personal data breaches, ensuring relevant information is captured and escalated in line with procedure.
• Support routine data protection queries, staff guidance, awareness activities and DPIAs, referring matters requiring formal advice or decision-making to the Data Protection Officer.

What We’re Looking For

We’re looking for someone who can manage detailed administrative processes, protect confidential information and keep accurate records while working to statutory deadlines. You’ll be methodical, proactive and comfortable working independently within agreed procedures, with the judgement to recognise when escalation is required.

Experience

• Practical knowledge of the UK GDPR, the Data Protection Act 2018 and secure personal data handling principles.
• Experience supporting or managing DSARs, including logging, information gathering, review, redaction, deadline monitoring and preparation of responses.
• Experience handling sensitive and confidential information securely within organisational systems.
• Experience supporting the recording, initial assessment and escalation of suspected personal data breaches and contributing to DPIAs.
• Experience working across business areas to obtain, review and organise information within agreed timescales.
• Experience using Microsoft 365 or similar case and document-management systems to maintain accurate records, actions and audit trails.

Skills & Expertise

• Strong organisational and administrative skills, excellent attention to detail and the ability to prioritise competing deadlines.
• Clear and professional written and verbal communication skills.
• Practical understanding of DSAR administration, secure information handling, redaction principles, statutory deadline monitoring and accurate record keeping.
• Confidence using Microsoft 365 and associated workflow tools.
• The ability to work independently within agreed procedures and recognise when formal advice or escalation is required.
• A discreet, dependable and collaborative approach to sensitive information and stakeholder relationships.
• Knowledge of DPIAs, records of processing activities, personal data breach management and ICO guidance is desirable.

Why Join Marley Risk Consultants?

At Marley, we’re passionate about creating an environment where our people can make an impact, develop their expertise and help shape the way we work. This is an opportunity to build practical experience across a broad range of data protection activity while supporting a function that protects individuals, strengthens governance and enables responsible business decisions. You’ll be encouraged to contribute ideas, improve processes and help embed good data protection practice across the organisation. You’ll be joining a collaborative business where your voice matters, with opportunities to learn, develop and build your career alongside people committed to doing the right thing. If you’re looking for a role where you can make a difference, take ownership and support a strong culture of privacy and accountability, we’d love to hear from you.