Data Protection Officer - FinTech

Role overview

Job responsibilities

• Build and operate the privacy and data governance programme, including policies, standards, procedures, controls, and operating cadence.
• Own data mapping and Records of Processing Activities across cloud services, data platforms, and AI/ML workflows.
• Lead Data Protection Impact Assessments and data-related risk assessments for products and AI use cases.
• Embed privacy-by-design within technology architecture, SDLC/CI-CD, and the data lifecycle with Technology and Information Security teams.
• Implement controls for data minimisation, access, logging, classification, retention, deletion, and transparency.
• Manage data subject rights operations, including identity verification, fulfilment, audit trails, and service levels.
• Support privacy incident response and breach notification activities with Information Security, Legal, and Operations.
• Manage privacy controls for technology vendors, cloud providers, and AI partners.
• Maintain programme metrics and evidence for audits, regulatory readiness, security questionnaires, and client due diligence.

Successful applicant

• At least 7 years of experience in data protection, technical privacy, information security, or data governance within a technology-led or FinTech environment.
• An IT, cybersecurity, information security, or technical data governance background is essential.
• Hands-on experience designing and operating privacy and data protection controls across cloud services, applications, APIs, or data platforms.
• Experience delivering data mapping, RoPA, DPIAs, data subject rights processes, data classification, retention controls, and privacy incident support.
• Demonstrable experience directly implementing controls.
• Practical experience applying privacy-by-design within cloud-native architectures and software or product development processes.
• Experience addressing data protection and governance risks associated with AI/ML workflows, AI-enabled products, or third-party AI services.
• Experience in FinTech, financial services, payments, or another regulated or high-trust environment is preferred.
• CIPP/E, CIPP/US, or CIPM qualifications are advantageous but do not replace the required technical background.

Offer

• The role is permanent and hands-on, with responsibility for building the data protection and privacy control environment.
• The position includes direct involvement with leadership.