Data Privacy Manager

5 дн. назад

70k–88k GBP / yearUnited KingdomEuropeHybrid

Responsible for managing data privacy functions within Operational Risk & Compliance at , supporting confident decisions about customer data.

Our Story   Hello there. We’re .   We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at .com !    We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces.    I

Advise product and business teams on privacy implications of new products, changes and customer journeys.
Translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.
Support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, ROPA and third-party diligence.
Manage complex privacy incidents, including regulatory notification and engagement with affected individuals where required.
Oversee high-quality, timely handling of DSARs, erasure requests and objections.
Build trusted partnerships across technology, legal, risk, security and commercial functions.
Develop your direct report and strengthen privacy awareness across the business.
Contribute to the Bank’s approach to data risk across a broad range of business activity

Bring hands-on PCI DSS knowledge and want to help build this capability across the function.
Know PCI DSS requirements and their practical application in financial services or payments.
Assess cardholder-data flows, scope boundaries and control gaps as part of broader data-risk reviews.
Have contributed to PCI DSS compliance programmes.
Understand regulated financial services and how privacy obligations interact with FCA and PRA expectations.
Comfortably influence senior executives and handle challenging conversations.
Bring exposure to another risk discipline, such as compliance or operational risk
Experience using OneTrust to manage data privacy obligations

Bring deep practical knowledge of UK GDPR, the Data Protection Act 2018 and wider UK privacy regulation.
Apply privacy law proportionately in a commercial environment and give pragmatic, business-enabling advice.
Make and defend risk-based decisions, including challenging interpretations where commercial impact outweighs the actual privacy risk.
Have helped develop a data protection function in an organisation with evolving privacy maturity.
Design and implement governance frameworks covering DPIAs, privacy by design, retention, ROPA and third-party due diligence.
Manage data breaches and privacy incidents end-to-end, including ICO notification where required.
Handle data-subject rights requests with quality, timeliness and defensible decisions.
Build credibility with business, technology, legal, risk and security stakeholders.
Lead and develop high-performing teams with accountability and continuous improvement.