Data Protection Officer

Canal & River Trust; United Kingdom; Remote; GBP 75,000 - 85,000; Full time

Benefits offered by this job

Competitive pension scheme

Increasing holiday entitlement

Range of employee benefits

Job summary

Canal & River Trust is seeking a Data Protection Officer to provide independent leadership on data protection, privacy and responsible handling of personal information across the charity. You will oversee compliance with UK GDPR, champion privacy by design, manage DPIAs and data breach response, and act as the main contact with the ICO while supporting innovation and strategic change.

The role is offered with remote working and occasional hub attendance, accompanied by a competitive salary and

Qualifications

• Significant experience in data protection within a large or complex organisation.
• Experience advising Executives and the Board on data protection and privacy risks.
• Experience leading data protection or information governance professionals.
• Experience managing DPIAs, data breaches and regulatory engagement.
• Experience collaborating with IT, Digital, Procurement, Legal and operations on privacy risk.

Responsibilities

• Provide independent oversight and assurance on compliance with data protection legislation, regulatory guidance and internal policies.
• Lead development and delivery of a risk-based data protection assurance programme and identify key privacy risks.
• Act as primary ICO liaison, managing regulatory enquiries and communications.
• Oversee data subject rights and information rights processes to ensure timely compliance.
• Provide guidance on data breaches, risk assessment, investigations and corrective actions.
• Advise on data sharing, third-party processing and international transfers with appropriate safeguards.
• Champion privacy by design and oversee DPIAs for new systems and projects.
• Provide strategic privacy risk advice to senior leaders and support digital transformation.
• Support informed, compliant decision-making balancing innovation with privacy.

Skills

Data protection

Privacy governance

DPIAs

Regulatory engagement

Executive advisory

Stakeholder management

Education

Relevant professional data protection or privacy qualification

Job description

Join Our Team: Data Protection Officer

Join our Assurance division as a Data Protection Officer.

Working Hours & Travel

This role follows 37 hours, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required.

Role Overview

As the Trust’s Data Protection Officer, you will provide expert, independent leadership on data protection, privacy and the responsible use of personal information. Acting as the Trust’s senior specialist adviser, you will support and challenge colleagues at all levels to ensure data protection risks are effectively identified, managed and monitored.

You will oversee compliance with data protection legislation and internal policies, champion privacy by design across projects and services, and serve as the Trust’s key contact for the Information Commissioner’s Office. Working across our charitable, operational, fundraising, volunteering, employment and digital activities, you will help ensure personal information is handled lawfully, transparently and responsibly while enabling innovation, informed decision-making and organisational change.

Key Responsibilities

• Provide independent oversight and assurance on the Trust’s compliance with data protection legislation, regulatory guidance and internal policies.
• Lead the development and delivery of a risk-based data protection assurance programme, identifying key privacy risks and recommending improvements.
• Act as the Trust’s primary point of contact with the Information Commissioner’s Office (ICO), managing regulatory enquiries, notifications and communications.
• Oversee the management of data subject rights requests and information rights processes, ensuring compliance with statutory requirements and timescales.
• Provide expert guidance on personal data breaches and incidents, including risk assessment, reporting obligations, investigations and corrective actions.
• Advise on data sharing, supplier relationships, international data transfers and third-party processing arrangements, ensuring appropriate safeguards are in place.
• Champion privacy by design and oversee Data Protection Impact Assessments (DPIAs) for new projects, systems, services and organisational changes.
• Provide strategic advice to senior leaders on data protection risks, digital transformation initiatives, emerging technologies and the responsible use of data.
• Support the Trust to make informed, compliant and proportionate decisions that balance innovation with privacy and regulatory requirements.
• Lead the development of data protection awareness, training and guidance programmes, fostering a positive culture of accountability and compliance across the Trust.
• Monitor emerging legislation, regulatory developments and best practice, ensuring the Trust’s data protection framework remains effective and up to date.
• Promote transparency, trust and the responsible management of personal information across all areas of the Trust’s charitable, operational, employment, volunteering, fundraising and digital activities.

About You

• Significant experience working in data protection, privacy or information governance within a large or complex organisation.
• Experience providing Executive and Board-level advice and challenge on significant data protection and privacy risks.
• Experience leading or providing professional direction to data protection or information governance specialists.
• Experience managing complex DPIAs, data breaches, information rights matters and regulatory engagement.
• Experience working with IT, Digital, Procurement, Legal and operational teams on privacy risks arising from technology, systems and third-party arrangements.

Knowledge & Skills

• Expert knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR.
• Good understanding of wider information governance, information rights and records management requirements.
• Strong understanding of data protection risks arising from digital transformation, artificial intelligence, automated processing, information security, surveillance, employee data and fundraising.
• Strong analytical and risk-assessment skills, with the ability to distinguish material risk from theoretical or low-level compliance issues.
• Excellent communication and influencing skills, with the confidence to challenge senior stakeholders appropriately and explain complex issues in clear, practical language.
• Ability to exercise independent judgement while working collaboratively across the organisation.
• Relevant professional data protection or privacy qualification, or equivalent demonstrable expertise.

Contact & Application

If you have any questions, feel free to reach out to us at [e-mail].

What We Offer

In addition to your annual base salary of £75,000 - £85,000 dependant on experience.

• competitive pension scheme
• increasing holiday entitlement
• range of employee benefits

Learn more: https://canalrivertrust.org.uk/about-us/work-for-us/our-benefits