Data Protection Manager

FOOTBALL ASSOCIATION; Wembley; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A prominent sports organization in Wembley is seeking a proactive Data Protection Manager to support data protection practices. The role includes developing privacy policies, managing data subject requests, and ensuring compliance with regulations. The ideal candidate has extensive knowledge of UK data protection laws and strong analytical skills. This opportunity offers competitive salary and unique benefits including free medical cover and event day tickets.

Benefits

Access to event day tickets at Wembley Stadium

Free nutritious lunches

Free private medical cover

Contributory pension scheme

Additional 'Thank You' and volunteering leave

Flexible hybrid working model

Qualifications

• Experience in managing data subject requests.
• Ability to conduct regular privacy risk assessments.
• Competence in delivering privacy training programs.

Responsibilities

• Develop and maintain privacy program aligned with regulations.
• Draft and enforce privacy policies and procedures.
• Oversee incident responses for privacy breaches.
• Manage data subject requests efficiently.
• Plan and deliver privacy training programs.

Skills

Excellent knowledge of data protection

Strong understanding of data subject rights

Strong analytical and problem-solving skills

Excellent written and verbal communication skills

Good organisational skills

Proactive and collaborative working style

Discretion and sound judgment

Competence in using Microsoft 365

Willingness to learn

Education

Relevant certification in data protection

Tools

OneTrust

Job description

The FA is looking for a proactive and collaborative Data Protection Manager, to utilise their subject matter expertise to provide data protection support to the FA Group on all data protection issues.

Please provide a covering letter with your application, clearly outlining your interest in the role and how you meet the criteria.

What will you be doing?

Privacy Program & Strategy

• Assist in the development, implementation, and maintenance of The FA's privacy program, ensuring alignment with business objectives and regulatory requirements (e.g., UK GDPR, DPA18, PECR)

Policy & Procedure Development

• Draft, update, and enforce privacy policies, procedures, and guidelines across The FA.
• Ensure all business and data management processes reflect privacy requirements and comply with laws and regulations.

Compliance Monitoring & Risk Management

• Conduct regular privacy risk assessments and gap analyses to identify and mitigate risks.
• Oversee incident response for privacy breaches, including investigation, documentation, and reporting.

Data Subject Rights & Operations

• Manage data subject requests (including DSARs), ensuring timely and compliant responses.
• Maintain records of processing activities (ROPAs) and data maps.
• Oversee and manage The FA's data protection inbox, ensuring efficient triage, coordination, and resolution of data protection enquiries, incidents, and requests in line with organisational policies and regulatory requirements.

Training & Awareness

• Plan and deliver privacy training programs and awareness campaigns for staff.
• Foster a culture of privacy by design and default throughout the organization.

Continuous Improvement

• Monitor changes in privacy laws and best practices, updating internal processes accordingly.
• Lead initiatives to improve privacy maturity and operational efficiency.
• Execute additional tasks as required to meet the FA's changing priorities.
• Comply with all company policies and procedures to ensure that the highest standards of health, safety, and well-being can be maintained.
• As part of the FA's commitment to ensuring a safe environment for everyone in football, every employee will be required to complete a DBS check. The level of the check required will be based on the activity of the specific job role and in line with legislation and government guidance.

What are we looking for?

Essential for the role:

• Excellent knowledge of data protection and privacy law, particularly the UK GDPR, Data Protection Act 2018, and PECR.
• Strong understanding of data subject rights and the ability to manage requests (e.g. DSARs, erasure, restriction).
• Strong analytical and problem‑solving skills, with the ability to interpret and apply data protection principles to real‑world scenarios.
• Excellent written and verbal communication skills, including the ability to explain complex data protection issues clearly to non‑specialist audiences.
• Good organisational skills, with the ability to manage multiple tasks, prioritise effectively, and maintain attention to detail.
• Proactive and collaborative working style, able to build relationships with internal stakeholders across departments.
• Discretion and sound judgment when handling sensitive or confidential information.
• Competence in using Microsoft 365 and data management tools to support record‑keeping and reporting.
• Willingness to learn and develop subject matter expertise in data protection and information governance practices.

Beneficial to have:

• Experience working within a sports organisation, membership body, or charity, particularly where safeguarding or disciplinary processes are key functions.
• Familiarity with data protection impact assessments (DPIAs) and records of processing activities (RoPAs).
• Experience using OneTrust
• Experience supporting or responding to personal data breaches
• Relevant certification or training in data protection or information governance (e.g., BCS Data Protection Practitioner, CIPP/E, or equivalent).

What's in it for you?

We are committed to ensuring everyone can flourish in their roles, to achieve this we have unique office spaces under the arch of the iconic Wembley National Stadium, which is the home of English Football. We are also delighted to offer a world‑class, Elite Performance Centre, St. George's Park in Staffordshire which is an exceptional setting to develop and inspire high‑performing England teams and leaders.

We pride ourselves in offering a competitive salary as well as great opportunities to develop and grow in your role. But that is not all; we also have a range of exciting benefits, some of which can be found below:

• Access to event day tickets at Wembley Stadium, alongside a host of regular internal events throughout the season, encouraging you to connect and learn with your colleagues and look after your mental health and well‑being.
• Free, nutritious lunches at Wembley Stadium and St. George's Park.
• Free private medical cover.
• A contributory pension scheme.
• An additional 'Thank You' days leave, volunteering days as well as 25 days annual leave (based on a full-time, permanent contract.)
• A hybrid working model which offers greater flexibility.

For more information on what it is like to work at The FA, please visit our FA Careers page, via the button below.

Currently, we are working within a hybrid working model whereby the expectation is to work from your contractual location for part of the week, and as and when required by the team. The remaining days can be worked remotely. We will continue to monitor this model, and it may be adjusted in future if deemed necessary. The contractual location of this role can be found on the FA Careers page.

We are a diverse workplace, aspiring to represent football across the country. The Football Association actively promotes inclusion and diversity, encouraging you to be the best version of yourself at work.

We welcome applications from everyone and are proud to be an equal opportunities employer. If you have any particular requirements in respect of the recruitment or interview process, please mention this during your application.

As part of the FA's commitment to ensuring a safe environment for everyone in football, every employee will be required to complete a DBS check. The level of the check required will be based on the activity of the specific job role and in line with legislation and government guidance.