Data Privacy Associate (FTC - 12 Months) New

Triple Point; Greater London; On-site; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Contributory pension

Hybrid/flexible working

Learning & development

Competitive salary

Job summary

Triple Point is seeking a Data Privacy Associate for a 12‑month FTC in London. You will support the GDPR program, DPIAs, TIAs, and data governance initiatives, reporting to the DPO and collaborating with Compliance, Legal and Ops. A strong background in UK GDPR, DPA 2018 and PECR is expected.

You will help manage DPIAs, ROPA, data retention, and data subject requests, with a focus on accuracy, audit trails and regulatory alignment. Hybrid working could be considered in a supportive environment.

Qualifications

• Direct experience in a data privacy, information security compliance or paralegal risk function.
• Strong understanding of UK GDPR, DPA 2018 and PECR.
• Familiarity with data governance, DPIAs and third‑party data processor oversight.
• Excellent communication skills to explain legal/regulatory requirements.
• Attention to detail with solid documentation and analytical abilities.
• Experience in banking, financial services or SaaS is advantageous.

Responsibilities

• Support DPIAs and TIAs and contribute to risk assessments.
• Assist data inventory, data governance, and Information Asset Register tasks.
• Help maintain Record of Processing Activities and Data Retention Schedule.
• Support subject access rights processes and data subject requests.
• Assist contract reviews to ensure UK GDPR compliance and data sharing controls.
• Aid in investigating data incidents and documenting steps for compliance.
• Produce documentation, process maps and records evidencing compliance improvements.
• Help prepare progress updates and MI for the DPO and Risk & Controls Committee.

Skills

Data privacy

UK GDPR

DPA 2018

PECR

Data governance

Documentation

Job description

Data Privacy Associate (FTC - 12 Months)

London, England

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit,Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.

There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work 2025 & 2026'.

If this sounds like an environment where you would flourish, then read on…

The Function & Team

Our purpose is to ensure that Triple Point operates in strict adherence to the rules and regulations established by the FCA. It’s our duty to diligently monitor industry standards and incorporate best practices throughout the organisation. A crucial part of our mission is to enhance awareness and understanding of the financial regulations that directly impact our business.

By joining the GRC function, you will become part of a collaborative and professional team that plays an essential role in supporting the firm’s success. Your contributions will directly influence how the business protects the personal data entrusted to it, while providing you with broad exposure to the firm’s operations, systems and third-party relationships. This is an opportunity to strengthen Triple Point’s control environment and to play a meaningful role in sustaining the company’s long‑term resilience and reputation.

Key Responsibilities

Purpose of the Role

The Data Privacy Analyst will play a crucial part in ensuring Triple Point’s day‑to‑day business processes, structure and operations adhere to UK data protection frameworks, including the UK GDPR and the Data Protection Act 2018 (DPA 2018).

Reporting to the Data Protection Officer (DPO), the role provides dedicated capacity for the GDPR enhancement programme, tracked against the ten pillars of the Group’s Accountability Tracker, and takes on a growing share of business‑as‑usual privacy activity. It works closely with Compliance, Digital & Technology, Legal, People and Client Operations.

We are looking for someone with a positive attitude who embraces problem‑solving and enjoys collaborating with teams across the business.

• Risk assessments: support the completion of Data Protection Impact Assessments (DPIAs) and Transfer Impact Assessments (TIAs).
• Data inventory and data governance: support the business to complete system and information data‑flow mapping, including supporting Digital & Technology with the Information Asset Register.
• Records and retention: help develop and maintain the Record of Processing Activities (ROPA) and the Data Retention Schedule, providing guidance and support to senior personnel within the business.
• Rights and request resolution: help develop the subject access rights process and procedure, and handle data subject requests and related complaints in line with statutory obligations and timescales.
• Contracts and data sharing: support the review of contracts, including through the Vertice contract management system, to ensure compliance with the UK GDPR and to support the completion and maintenance of the ROPA.
• Incident support: assist in investigating potential personal data incidents, logging details and coordinating step‑by‑step documentation to support internal and external compliance.
• Documentation and delivery: produce high‑quality documentation, process maps and records to evidence compliance improvements, ensuring all proposed actions are tracked to completion with clear audit trails and supporting artefacts.
• Reporting: help prepare progress updates and MI on the GDPR programme for the DPO, for onward reporting to the Risk & Controls Committee and ManCom.

Experience

• Proven direct experience in a dedicated data privacy, information security compliance or paralegal risk function.
• Solid and proven understanding and experience of the UK GDPR, the DPA 2018 and The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).
• Familiarity with data governance frameworks, privacy impact assessments and third‑party data processor oversight.
• Excellent interpersonal, written and verbal communication skills, with the ability to explain legal and regulatory requirements to non‑legal colleagues.
• High attention to detail, with strong documentation and analytical capabilities.
• Prior experience in banking, financial services or SaaS sectors (highly advantageous, though not essential).
• Awareness of the Data (Use and Access) Act 2025.
• Experience of, or familiarity with, IT infrastructure (such as cloud platforms, networks or data architecture)

Personal Qualities

• A positive, can‑do, commercial attitude with a solution‑oriented approach to problems and challenges.
• Able to work independently and drive progress within tight timeframes.
• Adaptable to evolving priorities in a dynamic, multi‑stakeholder environment.
• Strong commitment to professional standards, integrity, confidentiality and continuous improvement.
• Comfortable working under Risk and Compliance.

Why Join us?

• You’ll join a talented, collaborative team in a connected environment where ideas and initiative are valued.
• Be part of a growing and innovative team
• We offer a competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.
• Opportunities for professional development and career progression.

At Triple Point, high performance means living our values every day:

Take Thoughtful Action.

Pull Together.

Own It.

In line with our values Stay Curious and Take Thoughtful Action every employee has access to AI tools. We see technology as a co‑pilot, helping us improve efficiency and insight while keeping decisions grounded in thoughtful human judgement.

Triple Point offers a wealth of benefits including a contributory pension, hybrid/flexible working and ongoing learning and development opportunities. Check out our comprehensive list of benefits HERE .

Triple Point is dedicated to providing fair and equal opportunities for all individuals, including both current and potential employees. Discrimination of any kind based on factors such as age, disability, gender, sexual orientation, pregnancy, race, ethnicity, religion, gender identity, or marital status is not tolerated by the company.

Our aim is to create a welcoming and diverse work environment where people from all walks of life feel valued and supported. We actively encourage individuals from various backgrounds to apply for job vacancies and become part of our team.

You can find a link to our candidate privacy notice HERE.