Governance & Data Protection Administrator

As Governance & Data Protection Administrator, you will support the delivery of effective governance and data protection across Cornerstone. You will co-ordinate governance activities, maintain key records and policies, and help ensure the organisation meets its legal, regulatory and information management responsibilities.

Responsible to: Governance Manager

Responsible for: No line management responsibility

Salary: £28,976 a year depending on experience and qualifications

Hours: 35 hours per week

Closing Date: 01/10/2026 9.00am

Provide efficient, accurate and proactive operational support across all aspects of governance administration, ensuring meetings are well-serviced, records are well-maintained, compliance is supported, and the Governance Manager is effectively backed in delivering a high-quality governance function.

• Meeting and Board Administration
  • Prepare and collate papers for Board, committee and governance meetings, ensuring materials are accurate, complete and available in good time.
  • Take accurate, clear and timely minutes for Board and committee meetings, providing a reliable record of discussions and decisions that supports the governance audit trail.
  • Track and monitor actions arising from meetings, proactively following up with action owners to ensure timely completion.
  • Maintain and update the board portal, ensuring documents are uploaded accurately and relevant parties have access.
• Subject Access Requests
  • Administer and coordinate all subject access requests received by the organisation, ensuring they are logged promptly, acknowledged appropriately and managed in line with GDPR requirements and internal procedures.
  • Check that requests are valid, support identity verification where required, clarify the scope of requests where necessary and ensure key deadlines are recorded and monitored.
  • Coordinate information gathering across the business, working with relevant teams to identify, locate and collate records, correspondence and system information that may fall within the scope of the request.
  • Liaise with the external redaction company to securely transfer information, respond to queries and support the timely review and redaction of personal data before disclosure.
  • Maintain accurate records of each request, including actions taken, information received, decisions made, red actions applied and final responses issued, ensuring a clear audit trail is kept.
  • Monitor progress against statutory timescales, proactively following up with colleagues and suppliers to avoid delays and escalating risks, complex queries or potential breaches to the Governance Manager.
  • Support the preparation and secure issue of final responses to requesters, ensuring disclosures are accurate, appropriately redacted and handled sensitively and confidentially.
  • Contribute to continuous improvement by identifying learning from subject access requests, supporting updates to guidance, templates and processes where required.
• Data Breach
  • Provide administrative support for data breach incidents, ensuring potential breaches are logged promptly, recorded accurately and escalated to the Governance Manager in line with internal procedures.
  • Gather and record initial information about each incident, including what happened, what data may be affected, who is involved, actions already taken and any immediate risks identified.
  • Maintain the data breach log and support the tracking of actions, deadlines and follow-up activity, ensuring a clear audit trail is kept for each incident.
  • Assist with the preparation and collation of information needed to support breach assessment, internal reporting and any required communication with individuals or external bodies.
• Complaints Administration
  • Administer the complaints management process:…