Data Protection Coordinator

Marley Risk Consultants Limited; Cheltenham; Hybrid; GBP 24,000 - 32,000; Full time

Job summary

Marley Risk Consultants Limited in Cheltenham is seeking a Data Protection Co-Ordinator to support the Data Protection Officer and help meet UK GDPR obligations. You will coordinate DSARs, maintain data protection records, and assist with DPIAs while ensuring secure handling and audit trails.

This hybrid role (Cheltenham with two days remote) requires meticulous administration, attention to detail, and clear communication.

Qualifications

• Practical knowledge of DSAR administration and secure handling of information.
• Solid understanding of UK GDPR and Data Protection Act 2018 requirements.
• Ability to maintain accurate data protection logs, registers and audit trails.
• Experience supporting or escalating data protection incidents as needed.

Responsibilities

• Support DSAR administration, ensuring accurate logging, deadlines tracked and audit trails maintained.
• Collaborate with teams to gather information for DSAR responses using approved systems.
• Review documents for redaction or exemption and escalate to the Data Protection Officer as required.
• Assist with DSAR material reviews and prepare accurate, timely responses for approval.
• Maintain DPIA registers, breach logs and DSAR logs with diligent records.

Skills

DSAR administration

UK GDPR knowledge

Data handling

Audit trails

Tools

Microsoft 365

Case management systems

Job description

Data Protection Co-Ordinator

Location: Cheltenham with 2 days hybrid working

What You'll Be Doing

Working alongside the Data Protection Officer, you'll support Marley Risk Consultants in meeting its obligations under the UK GDPR and Data Protection Act 2018. You'll co-ordinate Data Subject Access Requests, maintain accurate data protection records and registers, support Data Protection Impact Assessments and monitor the Data Protection inbox.

You'll help ensure requests, enquiries and potential incidents are logged, progressed and retained correctly. Working across the business, you'll gather information securely, monitor statutory deadlines, identify gaps or risks and escalation urgent, sensitive or higher-risk matters promptly to the Data Protection Officer.

This is a great opportunity for someone who is highly organised, detail-focused and confident handling sensitive information. You'll combine practical data protection knowledge with strong administration and communication skills, helping maintain a clear audit trail and a consistent approach to privacy compliance.

Key Responsibilities

• Support the day-to-day administration of Data Subject Access Requests, ensuring requests are logged accurately, statutory deadlines are tracked, a clear audit trail is maintained and risks of delay are escalated.
• Work with teams across the organisation to identify and gather information required for DSAR responses using approved systems and secure handling methods.
• Review documents and identify information that may require redaction or exemption, referring final decisions and approval to the Data Protection Officer.
• Assist with reviewing DSAR material and preparing accurate, complete and timely responses for approval.
• Maintain accurate data protection logs and registers, including the personal data breach log, DPIA register and DSAR log, checking for missing, overdue or inconsistent entries.
• Monitor and manage the Data Protection inbox by triaging correspondence, recording actions, assigning or escalating matters and retaining completed items appropriately.
• Identify urgent, sensitive or higher-risk matters, including potential personal data breaches, complaints, regulatory correspondence and requests approaching statutory deadlines.
• Prepare complete case folders, check them against relevant records and promptly notify the Data Protection Officer of missing information, correspondence or actions.
• Support the initial recording and assessment of suspected personal data breaches, ensuring relevant information is captured and escalated in line with procedure.
• Support routine data protection queries, staff guidance, awareness activities and DPIAs, referring matters requiring formal advice or decision-making to the Data Protection Officer.

What We're Looking For

We're looking for someone who can manage detailed administrative processes, protect confidential information and keep accurate records while working to statutory deadlines. You'll be methodical, proactive and comfortable working independently within agreed procedures, with the judgement to recognise when escalation is required.

Experience

• Practical knowledge of the UK GDPR, the Data Protection Act 2018 and secure personal data handling principles.
• Experience supporting or managing DSARs, including logging, information gathering, review, redaction, deadline monitoring and preparation of responses.
• Experience handling sensitive and confidential information securely within organisational systems.
• Experience supporting the recording, initial assessment and escalation of suspected personal data breaches and contributing to DPIAs.
• Experience working across business areas to obtain, review and organise information within agreed timescales.
• Experience using Microsoft 365 or similar case and document-management systems to maintain accurate records, actions and audit trails.

Skills & Expertise

You'll bring:

• Strong organisational and administrative skills, excellent attention to detail and the ability to prioritise competing deadlines.
• Clear and professional written and verbal communication skills.
• Practical understanding of DSAR administration, secure information handling, redaction principles, statutory deadline monitoring and accurate record keeping.
• Confidence using Microsoft 365 and associated workflow tools.
• The ability to work independently within agreed procedures and recognise when formal advice or escalation is required.
• A discreet, dependable and collaborative approach to sensitive information and stakeholder relationships.
• Knowledge of DPIAs, records of processing activities, personal data breach management and ICO guidance is desirable.

Why Join Marley Risk Consultants?

At Marley, we're passionate about creating an environment where our people can make an impact, develop their expertise and help shape the way we work.

This is an opportunity to build practical experience across a broad range of data protection activity while supporting a function that protects individuals, strengthens governance and enables responsible business decisions. You'll be encouraged to contribute ideas, improve processes and help embed good data protection practice across the organisation.

You'll be joining a collaborative business where your voice matters, with opportunities to learn, develop and build your career alongside people committed to doing the right thing.

If you're looking for a role where you can make a difference, take ownership and support a strong culture of privacy and accountability, we'd love to hear from you.