Data Protection and Compliance Lead
Role details
Job location
Tech stack
Job description
Are you an experienced Data Protection and Compliance professional with a background in the corporate or regulated sectors, looking to use your skills and expertise for a good cause? We are seeking a volunteer to lead our supporter data management and compliance related activities.
We are seeking a volunteer to lead our supporter data management and compliance related activities. Key responsibilities will include (but are not limited to):
- Reviewing our personal data management processes to ensure they are compliant and follow best practices, and suggesting improvements as needed; Ensuring that the data management processes are being followed by everyone on the Optimise Team who handles personal data; Conducting regular data checks to determine if any of the personal details we hold need to be deleted in line with our data retention policy (and automating this process where possible); Supporting compliance related tasks beyond data management, ensuring that all Charity Commission and other legal/regulatory requirements are met; and Staying up to date on changes in legislation, regulatory standards, and best practices affecting the charity sector.
Requirements
You are an experienced Data Protection and Compliance professional with a strong background in the corporate or regulated sectors, looking to use your skills and expertise for a good cause. You can communicate well and make complex regulations easy for Optimise staff and volunteers to understand and follow. You are passionate about using your expertise to protect our donors and the people we support, ensuring Optimise Foundation remains a safe and trusted organization for everyone.You are self-motivated, reliable and trustworthy with a positive, flexible, and collaborative mindset who meets the following criteria:
Essential criteria
- Data Protection Expertise: Significant experience managing data protection and compliance, ideally within a regulated corporate environment. Regulatory Knowledge: A solid understanding of UK GDPR, the Data Protection Act 2018, and PECR (specifically how they apply to marketing and fundraising). Risk Management: The ability to identify data risks and provide clear, sensible advice on how to manage them.
Desirable criteria
- Working knowledge of Charity Commission guidelines and legislation relevant to charities