Information Management and GDPR Lead

Salary: up to £35,000 per annum

Location: Newark - Hybrid working with occasional travel to other places of work

Full time (35 hours per week)

2 year initial contract with possibility of extension

Closing date for applications: 22nd June 2025

First interview: 1st and 2nd July 2025

Second interview: 11th July 2025

About Us

Our client is a grassroots movement of people from a wide range of backgrounds and all walks of life, who believe that we need nature and nature needs us. They have more than 944,000 members, over 38,000 volunteers, 3,600 staff and 600 trustees. The next few years will be critical in determining what kind of world we all live in. Our client needs to urgently reverse the loss of wildlife and put nature into recovery at scale if we are to prevent climate and ecological disaster. They recognise that this will require big, bold changes in the way our client works, not least in how they mobilise others and support them to organise within their own communities.

About You

Do you have expertise in information management, data governance, and GDPR compliance? Do you have experience developing and delivering data services that support organisational goals and compliance? They are looking to recruit an experienced Information Management and GDPR Lead to drive best practices in data governance, privacy, and compliance across our client. This role will develop and manage a data protection service that provides guidance, tools, and resources to help our clients handle personal and non-personal data securely and effectively. You will oversee GDPR compliance, privacy notices, data-sharing agreements, and third-party processing, ensuring a consistent approach across the federation.

Alongside being their DPO, you will provide specialist support on areas such as subject access requests (SARs), monitor emerging legislation, develop and maintain template agreements, and ensure our client has access to legal expertise via external contractors. A key part of the role will be horizon scanning to keep our client informed and prepared for upcoming regulatory changes, which will include thinking about the governance of artificial intelligence for our client and federation. You will also support shared data services, including the data lake, and help align CRM systems and third-party platforms with compliance requirements. Additionally, you will monitor our client's risk exposure and compliance. We expect around 30/50% of the role will be supporting them, with the other up to 70% providing support and consultancy to the Trusts.

This role is critical in embedding a solid data culture, ensuring Trusts have the right processes and tools to manage their data responsibly, effectively, and in alignment with evolving legal and regulatory frameworks.

You are an experienced information management and data protection professional with a deep understanding of GDPR and data governance. You have a track record of managing data protection services, providing expert guidance on privacy, compliance, and best practices. You are confident in interpreting and implementing data protection legislation, supporting teams to embed robust information management processes, and ensuring compliance across a complex federated organisation.

You are skilled in horizon scanning, keeping ahead of emerging data regulations and risks, and ensuring our client remains compliant and proactive in response to legislative changes. You are comfortable developing template agreements, privacy notices, and data-sharing policies, ensuring consistency and compliance across multiple Trusts.

With excellent communication and problem-solving skills, you can translate complex legal and technical requirements into clear, practical guidance. You have experience working across teams, building trust and engagement, and delivering training to improve data literacy and compliance awareness. You thrive in collaborative environments, working with colleagues, legal advisors, and external experts to ensure The Wildlife Trusts’ approach to data protection is effective, ethical, and legally sound. You are also adaptable, ready to support new data initiatives, such as the development of a data service and governance of the data lake.

This role is perfect for someone who is passionate about data ethics, privacy, and governance, and wants to make a meaningful impact by ensuring responsible and effective data use across a leading environmental movement.

Our client is committed to safeguarding and promoting the welfare of children and adults at risk. For applicable roles, applicants must be willing to undergo checks with past employers and Disclosure and Barring Service checks at the eligible level. They take our Safeguarding responsibilities extremely seriously.

As a Disability Confident employer, they are committed to offering an interview to anyone with a disability that meets all the essential criteria for the post. Please let us know if you require any adjustments to make our recruitment process more accessible. They are committed to increasing the diversity of its staff through its Levelling the Field recruitment pledge and will put any ethnic minority applicants that meet all the essential criteria for the post through to the next stage of recruitment.

Please do not use artificial intelligence tools to assist you to complete the application form. We may not accept applications that have been completed utilising AI tools. If you would usually use tools such as these to assist you in filling in a form, please contact us to discuss this further and understand other options.