Data Privacy Manager

Description

IG Group is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions – built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.

Desirable

• Experience in UK financial services or a similarly regulated industry.

• Practical exposure to AI/ML-related privacy considerations - (e.g. automated decision-making, Article 22).

• Professional certification in data protection/privacy - (e.g. CIPP/E, CIPM, BCS Certificate in Data Protection).

Role Requirements

• 5+ years' experience - in a dedicated data privacy role within a regulated environment.

• Strong working knowledge of UK GDPR and EU GDPR - together with practical awareness of other privacy regimes relevant to IG's international footprint, including practical experience running DPIAs, RoPA and DSAR processes end-to-end.

• Experience operating within a multi-jurisdictional group structure - (e.g. UK, EU, APAC).

• Experience designing and embedding privacy governance documentation - policies, procedures, and escalation routes, ideally in an organisation without an existing dedicated function.

• Comfortable acting as the primary point of contact - for regulators, and for internal Audit and Risk stakeholders, on data privacy matters.

• Strong communication skills - able to translate legal and regulatory requirements into practical guidance for Product, Technology, HR, and other business teams.

• Experience delivering data privacy training and awareness programmes.

The Perks

• Competitive salary

• Flexible Benefits Package on top of your salary (12%)

• Private medical cover for you and your family

• Life insurance

• Contribution to gym memberships

• 25 Days holiday, with 1 additional day off to celebrate your Birthday & 2 additional days off a year for voluntary work (28 in total)

• The option to buy or sell holiday days

• A comprehensive global and local onboarding process

• Enhanced primary (maternity), secondary (paternity), and shared parental pay and leave, as well as a range of support and benefits for parents Learn more about the Perks here!

• Join us for this exciting journey. Apply now!

Key Responsibilities

• Be the central point of contact for data privacy - act as the go-to for all data privacy related questions across the Group, from policy interpretation to practical guidance for staff at all levels.

• Support the governance framework - support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, RoPA and third-party diligence.

• Own cross-border data transfers - put in place and maintain the mechanisms that allow personal data to move lawfully between IG's UK, EU and international entities, such as Standard Contractual Clauses, the UK International Data Transfer Agreement, and adequacy assessments.

• Own the regulatory interface - manage breach notifications to the relevant regulator within the required regulatory timeframe, DPIA consultations, and centralised data privacy reporting to SLT/Board.

• Advise on privacy by design - advise product and business teams on the privacy implications of new products, changes and customer journeys.

• Translate law into practical guidance - translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.

• Manage complex privacy incidents - including regulatory notification and engagement with affected individuals where required.

• Strengthen privacy awareness - across the business and help build out the privacy function as it grows - running training programmes that go beyond policy awareness to cover breach recognition and escalation for all staff.

• Contribute to the Group's approach to data risk - across a broad range of business activity.