Data Protection Officer
- Salary
- £75K–£85KGBP per year
- Hiring from
- United Kingdom
- Work type
- Remote
- Posted
- Oct 1, 2026
About the Trust
We're one of the UK’s biggest charities and we care for 2,000 miles of canals, rivers, docks and reservoirs because we believe life is better by water. We're looking for people who support our cause and want to make a difference for future generations. Could this be you?
Along with our waterways we also manage museums, archives and the country's third largest collection of historic buildings, as well as the nature and wildlife that calls our canals home. All of this enables us to provide wellbeing opportunities for millions of people each year.
Join Our Team: Data Protection Officer
Join our Assurance division as a Data Protection Officer.
Working Hours & Travel
This role follows 37 hours, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required.
Role Overview
As the Trust’s Data Protection Officer, you will provide expert, independent leadership on data protection, privacy and the responsible use of personal information. Acting as the Trust’s senior specialist adviser, you will support and challenge colleagues at all levels to ensure data protection risks are effectively identified, managed and monitored.
You will oversee compliance with data protection legislation and internal policies, champion privacy by design across projects and services, and serve as the Trust’s key contact for the Information Commissioner’s Office. Working across our charitable, operational, fundraising, volunteering, employment and digital activities, you will help ensure personal information is handled lawfully, transparently and responsibly while enabling innovation, informed decision-making and organisational change.
Key Responsibilities
- Provide independent oversight and assurance on the Trust’s compliance with data protection legislation, regulatory guidance and internal policies.
- Lead the development and delivery of a risk-based data protection assurance programme, identifying key privacy risks and recommending improvements.
- Act as the Trust’s primary point of contact with the Information Commissioner’s Office (ICO), managing regulatory enquiries, notifications and communications.
- Oversee the management of data subject rights requests and information rights processes, ensuring compliance with statutory requirements and timescales.
- Provide expert guidance on personal data breaches and incidents, including risk assessment, reporting obligations, investigations and corrective actions.
- Advise on data sharing, supplier relationships, international data transfers and third-party processing arrangements, ensuring appropriate safeguards are in place.
- Champion privacy by design and oversee Data Protection Impact Assessments (DPIAs) for new projects, systems, services and organisational changes.
- Provide strategic advice to senior leaders on data protection risks, digital transformation initiatives, emerging technologies and the responsible use of data.
- Support the Trust to make informed, compliant and proportionate decisions that balance innovation with privacy and regulatory requirements.
- Lead the development of data protection awareness, training and guidance programmes, fostering a positive culture of accountability and compliance across the Trust.
- Monitor emerging legislation, regulatory developments and best practice, ensuring the Trust’s data protection framework remains effective and up to date.
- Promote transparency, trust and the responsible management of personal information across all areas of the Trust’s charitable, operational, employment, volunteering, fundraising and digital activities.
About You
- Significant experience working in data protection, privacy or information governance within a large or complex organisation.
- Experience providing Executive and Board-level advice and challenge on significant data protection and privacy risks.
- Experience leading or providing professional direction to data protection or information governance specialists.
- Experience managing complex DPIAs, data breaches, information rights matters and regulatory engagement.
- Experience working with IT, Digital, Procurement, Legal and operational teams on privacy risks arising from technology, systems and third-party arrangements.
Knowledge & Skills
- Expert knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR.
- Good understanding of wider information governance, information rights and records management requirements.
- Strong understanding of data protection risks arising from digital transformation, artificial intelligence, automated processing, information security, surveillance, employee data and fundraising.
- Strong analytical and risk-assessment skills, with the ability to distinguish material risk from theoretical or low-level compliance issues.
- Excellent communication and influencing skills, with the confidence to challenge senior stakeholders appropriately and explain complex issues in clear, practical language.
- Ability to exercise independent judgement while working collaboratively across the organisation.
Relevant professional data protection or privacy qualification, or equivalent demonstrable expertise.
Contact & Application
If you have any questions, feel free to reach out to us at CRT.recruitment@canalrivertrust.org.uk. We encourage early applications as we may close the vacancy once we receive enough suitable candidates.
What We Offer
In addition to your annual base salary of £75,000 - £85,000 dependant on experience. We also offer a competitive pension scheme, increasing holiday entitlement, and a range of employee benefits. For a full breakdown of our benefits, check out our brochure here: EVP - 1.
Learn more: https://canalrivertrust.org.uk/about-us/work-for-us/our-benefits
#INDHP
Our values
We care passionately for our waterways, and as importantly, for those who look after and use them. We are committed to building a diverse and inclusive workforce where everyone can thrive. We are striving to represent the diverse communities that we are a part of and welcome applicants from across all sectors of the community.
We want everyone to have the opportunity to perform at their best during our recruitment process. If you require any reasonable adjustments - whether for a disability, neurodiversity, or health condition - please let us know what you need and how we can support you. We’ll work with you to make any necessary changes.
All of our jobs can be considered on a part time, flexible or job share basis.
We operate a Guaranteed Interview Scheme for disabled applicants who meet the minimum criteria for the role. You are considered disabled under the Equality Act 2010 if you have a physical or mental impairment that has a substantial and long-term negative effect on your ability to carry out normal day-to-day activities. We recognise not everyone who is classified as disabled under the Equality Act personally identifies this way, or with this definition of disability. Please do not let this discourage you from applying under the scheme.
At Canal & River Trust, we are committed to fair, transparent, and ethical recruitment practices. As part of our hiring process, we may use AI to analyse applications and support us work more efficiently. However, all hiring decisions – without exception - are made by our hiring managers.
Navigate your future and lock in your career as we keep our canals open and alive.
Find out more about us on our website: https://canalrivertrust.org.uk/about-us