Governance & Data Protection Partner in Shrewsbury

Gymnastics isn't just a sport - it's a powerful force for change. We believe in the power of gymnastics to change lives, enrich communities, and deliver an uplifting gymnastics experience for all across the UK. At the heart of this are the people who make up the gymnastics community - gymnasts, parents, coaches, clubs, officials and volunteers - working together in communities across the country. As the national governing body for gymnastics in the UK, we work in partnership with our members to lead, support and inspire, helping to shape a bright future for our sport. Our vision, Leap Without Limits, is underpinned by the values of being Aspirational, Supportive and Inclusive. Together, we’re building a sport where everyone feels welcomed, encouraged and able to thrive. This role is an important part of making that vision a reality.

The Opportunity

We are looking for a Data Protection & Governance Partner to join our Governance team. This is an exciting opportunity to play a key role in strengthening governance and data protection practices across the organisation. Working closely with the Governance Manager and other Data Protection & Governance Partners, you will help embed a culture of compliance, accountability and continuous improvement.

Main responsibilities:

• Support the implementation and ongoing improvement of governance, risk management and data protection frameworks, systems and controls.
• Act as a first point of contact for data protection queries, providing practical, risk-based advice and escalating complex matters where appropriate.
• Lead on day-to-day data protection activities, including maintaining records of processing activities (ROPA), privacy notices and policy documentation.
• Conduct Data Protection Impact Assessments (DPIAs) and support projects to ensure data protection principles are embedded from the outset.
• Manage and respond to data subject requests (e.g. DSARs), ensuring compliance with statutory requirements and accurate record-keeping.
• Monitor, record and support the response to personal data breaches, working collaboratively with IT and other teams to mitigate risks and share lessons learned.
• Contribute to governance reporting, including preparing data protection metrics, board reports and supporting regulatory correspondence.
• Support the delivery of data protection training and engagement initiatives, including coordinating the data champion network to promote a strong data protection culture.

About you:

• Practical experience supporting core data protection processes (e.g. DPIAs, ROPA, data subject requests and breach management), or the ability to quickly develop this expertise.
• Strong analytical skills and attention to detail, with a methodical, process-driven approach to managing information and compliance activities.
• The ability to manage multiple priorities and deadlines, maintaining accurate records, audit trails and clear escalation pathways.
• A high level of integrity and discretion, with experience handling sensitive and special category personal data appropriately.
• Experience supporting audits, applying policies and contributing to organisational improvement and action planning.
• Strong written and verbal communication skills, with the confidence to challenge constructively, provide guidance and engage stakeholders at all levels.
• The ability to interpret and apply relevant legislation and guidance (including UK GDPR and the Data Protection Act 2018) in a practical, proportionate way.
• Strong IT and administrative skills, including experience using Microsoft 365, alongside a proactive mindset for learning, problem-solving and continuous professional development.

Job Details:

• Hours: 37 hours per week
• Salary range: £28,183 to £28,650 per annum
• Contract type: Permanent
• Location: Dual based working from Lilleshall National Sports Centre, nr Newport, Shropshire (2 days a week) and from home.

How to apply:

Click 'Apply' to upload your CV and a covering letter. In your covering letter, please tell us how you meet the requirements of the role, as outlined above and in the Role Profile. We are committed to building a diverse and inclusive organisation. We particularly welcome applications from women, people with disabilities, people from ethnically diverse communities, and people who identify as LGBTQIA+, as these groups are currently under-represented in our workforce.