Interim Data Protection Manager – GDPR & DPIA Lead

Allen Lane; Slough; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Allen Lane are partnering with a not-for-profit organisation to recruit an interim Data Protection Manager for a 3-6 month contract inside IR35. Hybrid working with 1-2 days onsite in London.

You will lead a full GDPR compliance audit, overhaul data protection documentation, map data flows, create DPIAs where appropriate, and advise on remedial actions. You will also support data subject access requests, training development, and fundraising data practices.

Qualifications

• Strong working knowledge of UK GDPR, the Data Protection Act 2018 and PECR, with the ability to apply these requirements in a practical organisational context

Responsibilities

• Carry out a full GDPR compliance audit and identify gaps or deficiencies, producing a formal report
• Propose and implement remedial actions arising from the audit
• Overhaul data protection documentation, producing a revised Data Protection Policy and accompanying processes and forms
• Ensure that data flows are mapped and DPIAs are created where appropriate
• Review data protection requirements across systems, suppliers, contracts and data sharing arrangements and advise on gaps/remedial actions
• Identify training needs and develop fit-for-purpose GDPR training on operational aspects including DPIAs and data flow mapping
• Work with the Fundraising team to ensure fundraising practices are compliant and support a fundraising data policy if appropriate
• Act as the first point of contact for data subject access requests and coordinate with relevant teams

Skills

UK GDPR knowledge

Job description

Allen Lane are partnering with a not-for-profit organisation to recruit an interim Data Protection Manager for a 3-6 month contract inside IR35. Hybrid working with 1-2 days onsite in London.

You will lead a full GDPR compliance audit, overhaul data protection documentation, map data flows, create DPIAs where appropriate, and advise on remedial actions. You will also support data subject access requests, training development, and fundraising data practices.