Arsenal FC logo
1 Jul 2024

Data Protection & Information Security Executive

🇬🇧 Greater London, UK
Full Time
3+ years exp.

The Role


We are looking for a Data Protection and Information Security Executive to ensure we continue to meet our obligations under data protection legislation and comply with best-practice information security and privacy frameworks.

Who we are


We are one of the most famous clubs in world football, with a rich heritage and history of success – read more about our history, here.

Beyond that, we are passionate about our local community and, behind the scenes, we have a wide variety of opportunities and career paths for all. We have a very defined purpose: to act for a winning team, culture and community. We achieve this by ensuring we are courageous in the pursuit of progress, we champion our community and each other, and that we do the right thing (even when no one is looking).

Your day-to-day


  • Maintaining ROPA - Maintaining and improving the Club’s Record of Processing Activities (ROPA) by liaising with data champions to ensure the ROPA is up-to-date and accurate
  • Risk assessment - Identifying the need for Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs). Oversee the process including reviewing submissions, ensuring accuracy and completeness, and sign-off
  • Providing advice and guidance - Providing data protection advice to end-users in accordance with the Club’s data protection policy and all relevant data protection laws
  • Data subject requests - Being the first point of contact for data subjects, such as receiving data protection related enquiries and processing data subject rights requests
  • Supporting with audits - Participating in departmental and functional data protection compliance audits
  • Reporting - Completing data protection incident reports
  • Moderating emails - Monitor the e-mail security gateway and act as the moderator, releasing or rejecting e-mails to colleagues
  • Investigating security alerts - Liaise with the Security Operations Centre (SOC) and assist with investigating security alerts and incidents

What we are looking for


  • Demonstrated experience of working in a data protection role, including:
    • Handling data subject access requests and data deletion requests
    • Maintaining Record of Processing Activities
    • Dealing with queries from colleagues and customers
    • Providing advice and guidance to colleagues
  • A growing knowledge of data protection laws including DPA 2018, GDPR (UK and EU), PECR and The ePrivacy Directive
  • DPA 2018/UK GDPR training/certification (Desirable)
  • High level of integrity, confidentiality, and professionalism, with respect for data subjects' rights and interests
  • Ability to manage own workload and prioritise effectively
  • Approachable and helpful by nature
  • Ability to simplify and distil technical and data protection concepts to communicate effectively
  • Willing to build effective relationships with colleagues, suppliers, and partners at all levels

Why choose us


At Arsenal, we want everyone to feel a sense of trust and belonging, so we are proud of both our club values and also what we offer to our employees. As one of our Gunners, you will receive:

  • An exciting reward and recognition scheme
  • Generous holiday allowance which increases with your length of service
  • Great internal learning and development programmes
  • A flexible hybrid working model
  • Priority access to apply for match tickets
  • A competitive health and wellbeing benefits package
  • A leading Employee Assistance Programme
  • Great discounts with some of our Partners

Arsenal for Everyone


Arsenal for Everyone is our commitment to promoting and embracing equality, diversity and inclusion, so that everyone connected to the club feels like they belong to the same Arsenal family. We believe that diversity of background, skills and experience drives our success on and off the pitch. 

Disability Confident Leader


We are a Disability Confident Leader. We actively welcome applications from people with disabilities and long-term health conditions. If you need disability-related adjustments to the recruitment process, please indicate this in your application.

If you are likely to meet the definition of being a ‘disabled person’ according to the Equality Act 2010, we will offer you an interview if you meet the minimum criteria for a role. Please choose the option of a guaranteed interview on your application form. The information you share with us about your health or disability will not be used in recruitment decisions.

Application Closing Date - Wednesday 10th July 2024


Please note: we reserve the right to close the position early if application volumes are particularly high. We encourage you to get your application in sooner rather than later.

Good luck!

External Apply