Data Privacy Manager

IG's Data & AI team is scaling up how the business governs, understands, and trusts its data. As our Data Privacy Manager, you'll be the Group's central point of contact for data privacy - closing the gap between policy and practice, taking ownership of the RoPA process, DPIAs, DSAR protocol, retention practices, and breach reporting, and giving IG a single accountable home for data privacy compliance.

About the Team

This role sits within the Data & AI team, reporting into the Head of Data Governance & Strategy. This is an individual contributor role and the first hire into a newly centralised function, so it requires someone comfortable working on their own initiative and building relationships with stakeholders at all levels. As the function scales, this role will pick up direct reports.

Key Responsibilities

As Data Privacy Manager, you'll lead the strategic and day-to-day agenda for data privacy at IG, partnering closely with Legal, Risk, Compliance, HR, Procurement, Technology, and Product colleagues. You'll help evolve a privacy capability that is rigorous where it needs to be and practical everywhere it can be.

Be the central point of contact for data privacy - act as the go-to for all data privacy related questions across the Group, from policy interpretation to practical guidance for staff at all levels.

Support the governance framework - support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, RoPA and third-party diligence.

Own cross-border data transfers - put in place and maintain the mechanisms that allow personal data to move lawfully between IG's UK, EU and international entities, such as Standard Contractual Clauses, the UK International Data Transfer Agreement, and adequacy assessments.

Own the regulatory interface - manage breach notifications to the relevant regulator within the required regulatory timeframe, DPIA consultations, and centralised data privacy reporting to SLT/Board.

Advise on privacy by design - advise product and business teams on the privacy implications of new products, changes and customer journeys.

Translate law into practical guidance - translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.

Manage complex privacy incidents - including regulatory notification and engagement with affected individuals where required.

Strengthen privacy awareness - across the business and help build out the privacy function as it grows - running training programmes that go beyond policy awareness to cover breach recognition and escalation for all staff.

Contribute to the Group's approach to data risk - across a broad range of business activity.

Role Requirements

5+ years' experience - in a dedicated data privacy role within a regulated environment.

Strong working knowledge of UK GDPR and EU GDPR - together with practical awareness of other privacy regimes relevant to IG's international footprint, including practical experience running DPIAs, RoPA and DSAR processes end-to-end.

Experience operating within a multi-jurisdictional group structure - (e.g. UK, EU, APAC).

Experience designing and embedding privacy governance documentation - policies, procedures, and escalation routes, ideally in an organisation without an existing dedicated function.

Comfortable acting as the primary point of contact - for regulators, and for internal Audit and Risk stakeholders, on data privacy matters.

Strong communication skills - able to translate legal and regulatory requirements into practical guidance for Product, Technology, HR, and other business teams.

Experience delivering data privacy training and awareness programmes.

Desirable

Experience in UK financial services or a similarly regulated industry.

Practical exposure to AI/ML-related privacy considerations - (e.g. automated decision-making, Article 22).

Professional certification in data protection/privacy - (e.g. CIPP/E, CIPM, BCS Certificate in Data Protection).

The Perks

It really is more than a job. We think like a start-up, but we deliver like a FTSE 100 — so the bar is high, and we won't pretend otherwise. We work hybrid, which means three days in the office. We’ll recognise your talent and make sure that you can still have a life – at work, and outside of it. Networks, committees, awards, sports and social clubs, mentorships, volunteering opportunities, extra time off... the list goes on.

Competitive salary

Flexible Benefits Package on top of your salary (12%)

Private medical cover for you and your family

Life insurance

Contribution to gym memberships

25 Days holiday, with 1 additional day off to celebrate your Birthday & 2 additional days off a year for voluntary work (28 in total)

The option to buy or sell holiday days

A comprehensive global and local onboarding process

Enhanced primary (maternity), secondary (paternity), and shared parental pay and leave, as well as a range of support and benefits for parents Learn more about the Perks here!

Join us for this exciting journey. Apply now!

Number of openings