We are seeking a Data Protection Trustee to provide Board-level oversight of data protection, cyber security, and information governance at GDWG. This role is vital in ensuring we safely manage highly sensitive information while delivering trauma-informed support to people during and after detention.
The Data Protection Trustee will play a key governance role, providing strategic oversight on behalf of the Board and advising on training and clarity of messaging to ensure staff and trustee knowledge of good practice and up to date requirements. As GDWG grows its CRM use, the ability to give advice and support on CRM development, with in particular a knowledge of Civi CRM, would be an advantage.
You will offer expert guidance to ensure GDWG maintains robust systems, policies, and safeguards to protect highly sensitive client, donor, staff, volunteer and community data across all aspects of service delivery.
You will support the Board to identify and manage data protection risks, ensure compliance with UK GDPR and wider regulatory requirements, and advise on cyber security and information governance, helping to ensure appropriate controls are in place to protect against evolving digital threats and maintain secure and resilient systems.
Under the Data (Use and Access) Act 2025, you will assist us to respond to complaints from data subjects, acknowledge receipt within 30 days, and take appropriate steps to investigate and respond without undue delay. In doing so, you will enable GDWG to operate safely, maintain trust with partners, and expand its reach without compromising quality or security.