Data Protection Officer (DPO)

Job Overview

Title: Data Protection Officer (DPO)

Location: East Grinstead

Job type: Permanent

Reporting to: Financial Controller

Line management responsibility: 3 direct reports:

Data Security Compliance Specialist (permanent)
Data Security Compliance Officer (permanent)
Data Security Compliance Advisor (contract)

About the job: The DPO will inform, advise and be the primary point of contact at the Club for data protection, data security and Payment Card Industry Data Security Standard (PCI DSS) compliance.

Serving as a subject matter expert in data protection, the role holder will provide strategic leadership across policy and compliance frameworks. This includes upholding the Club's compliance with UK data protection law and PCI DSS, while ensuring data security policies are closely aligned with established information security standards like ISO 27001.

Operating under the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR), the DPO is engaged in all matters concerning the processing of personal data. As this position is mandated and protected by law, this key role within the Club demands that the post holder executes their duties with integrity, diplomacy and the utmost professionalism. A pragmatic approach is also encouraged.

The DPO heads up the Data Security Compliance Team (DSCT) and manages all team members.