Data Protection Partner - Remote

Gymnastics isn’t just a sport—it’s a powerful force for change.

We believe in the power of gymnastics to change lives, enrich communities, and deliver an uplifting gymnastics experience for all across the UK.

At the heart of this are the people who make up the gymnastics community – gymnasts, parents, coaches, clubs, officials and volunteers – working together in communities across the country. As the national governing body for gymnastics in the UK, we work in partnership with our members to lead, support and inspire, helping to shape a bright future for our sport.

Our vision, Leap Without Limits, is underpinned by the values of being Aspirational, Supportive and Inclusive. Together, we’re building a sport where everyone feels welcomed, encouraged and able to thrive. This role is an important part of making that vision a reality.

What we're looking for?

We are looking for a Data Protection Partner to play a pivotal role in embedding and maintaining a robust data protection framework across the organisation. Working closely with our governance lead, external Data Protection Officer (DPO) and colleagues across all departments, you will provide practical advice, coordinate compliance activities and help ensure we meet our obligations under UK data protection legislation.

About you

This is an excellent opportunity for someone with data protection experience who enjoys balancing compliance, stakeholder engagement and continuous improvement. You will have the chance to influence organisational practices, support meaningful projects and contribute to creating a safe, inclusive and well governed environment for our members, clubs, colleagues and wider gymnastics community.

We’re looking for someone who can demonstrate:

• Experience supporting data protection compliance activities such as DPIAs, Subject Access Requests, records management or breach handling.
• A good understanding of UK GDPR, the Data Protection Act 2018 and wider data protection principles.
• Ability to prepare data protection metrics and management information (e.g., DSAR volumes, breach trends, DPIA status, training completion) to support Board reporting.
• Relevant practical experience ideally in, data protection supporting core data protection processes (e.g., DPIAs, ROPA maintenance, data subject requests, and personal data breach management), or demonstrable ability to learn these quickly.
• Strong organisational and administration skills, together with proficiency in Microsoft 365 applications.
• High levels of integrity, discretion and professionalism when handling confidential and sensitive information.
• Strong analytical skills with excellent attention to detail and a methodical approach to work.
• The ability to manage multiple priorities and maintain accurate records, audit trails and case documentation.
• Confidence communicating data protection requirements to a range of stakeholders in a clear and practical way.
• Experience developing reports, policies, guidance notes or other written documentation.
• The ability to interpret legislation, guidance and policy, applying these in a proportionate and pragmatic manner.
• A collaborative approach and experience building effective working relationships across teams and functions.

Key Responsibilities:

• Act as a key point of contact for day to day data protection queries, providing practical advice and guidance across the organisation.
• Manage the relationship with our external Data Protection Officer (DPO), ensuring effective collaboration and appropriate escalation of higher risk matters.
• Lead on more complex data protection queries, supporting managers and stakeholders to make informed, risk based decisions on the handling of personal data.
• Coordinate and support Data Protection Impact Assessments (DPIAs) for…