Data Protection Executive - Fixed Term, 18 months

About the role

As our Data Protection Executive, you will play a key role in supporting the Data Protection Officer in delivering effective data protection compliance across the organisation. You’ll help ensure we meet our obligations under the UK GDPR, Data Protection Act 2018, and other relevant information governance standards. This is an excellent opportunity for someone looking to further develop their career in data protection within a purpose‑driven environment. 

You will act as a first point of contact for data protection queries from staff and volunteers, providing clear guidance and support. You will work closely with the Data Protection Officer to maintain and develop data protection policies, procedures and training materials, while also assisting in the management and response to data subject rights requests (DSARs). Additionally, you will monitor and maintain the organisation’s Records of Processing Activities (ROPAs) and data asset registers, and help coordinate Data Protection Impact Assessments (DPIAs). 

You will also play a key role in investigating, documenting and supporting the reporting of data incidents and breaches. The role involves supporting internal audits, producing regular compliance reports and assisting with staff training and awareness initiatives to strengthen organisational understanding of data protection responsibilities. Staying informed about regulatory developments and emerging best practice will be essential to ensuring Historic Royal Palaces continuously meets its legal and ethical obligations. 

About You 

We’re looking for someone who is organised, curious, and passionate about doing the right thing and keen to collaborate with colleagues to adopt innovative new solutions to increase the impact of our charitable work. You’ll thrive in a busy environment, balancing priorities while maintaining excellent attention to detail. 

Essential: 

• Experience in a data protection governance role. 

• Sound understanding of the UK GDPR, Data Protection Act 2018, and ICO guidance. 

• Strong communication skills, with the ability to explain complex issues clearly to non‑specialists. 

• Excellent organisational and analytical abilities. 

• Experience working with sensitive and confidential information. 

• A collaborative approach and commitment to high standards of ethical practice. 

Desirable: 

• Experience in the charity sector. 

• Professional certification (e.g., BCS Data Protection) or willingness to work towards one. 

We have adopted a hybrid model of part working from home and part working from site, we are open to discussing what best works for individuals and their work life balance whilst also delivering the business requirements. 

Benefits include: 

• Hybrid working 

• Enhanced holiday entitlement 

• Generous Employers Pension Contributions (up to 11%) 

• Annual Pay reviews & Bonuses 

• Critical Illness Cover & Life Assurance 

• Family friendly policies and benefits  

• Staff discounts and free entry to all palaces 

Closing date: 29 May 2026, 11.55pm