Data Protection Manager at Charities Aid Foundation (CAF)

Are you passionate about data protection and privacy? Do you thrive in a regulated environment and enjoy embedding compliance into operational processes? CAF in the UK is seeking a Data Protection Manager to join our Operations team as a subject matter expert. Operating within the First Line of Defence (1LOD), you will work across CAF, collaborating with Product, Customer Relationship, and Second Line of Defence (2LOD) Compliance and Data Protection teams to ensure our practices align with UK GDPR and related legislation. You’ll play a key role in managing data protection risks and embedding privacy into everything we do.

We’re looking for a talented Data Protection Manager to join our Operations team at Charities Aid Foundation (CAF).

What you’ll do

At CAF, every one of us contributes to our impact, and as our Data Protection Manager you too will play an integral part in what we do.

As Data Protection Manager, you will lead the integration of data protection principles into operational processes across CAF UK. You’ll ensure compliance with UK GDPR, manage and mitigate data protection risks, maintain Records of Processing Activities (RoPAs), and support incident response and reporting. The role also involves advising on privacy matters, conducting Data Protection Impact Assessments (DPIAs), developing training materials, and promoting a culture of privacy awareness and continuous improvement throughout the organisation.

Who you’ll be

This role is for you if you have experience of working in Data Protection and are keen to make a difference to society. We are looking for:

• Background in data protection, privacy, or compliance within a regulated environment.
• Experience in First Line of Defence (1LOD) or operational risk
• Exposure to financial services, charity, or not-for-profit sectors
• Strong understanding of UK GDPR, DPA 2018, and international data transfer mechanisms
• Professional certification (e.g., CIPP/E, CIPM, BCS) desirable
• Passionate about customer protection and privacy