Data Privacy Manager

IG Group; Greater London; Hybrid; GBP 85,000 - 135,000; Full time

Benefits offered by this job

Hybrid work

Private medical cover

Life insurance

Gym membership

25 days holiday

Birthday day off

Voluntary work days

Job summary

IG Group is seeking a Data Privacy Manager to lead the Group's privacy program and translate UK GDPR/EU GDPR requirements into practical guidance for Product, Technology and the business. You will own DPIAs, RoPA, DSARs and breach reporting, partnering with Legal, Risk and Compliance.

This is a senior, individual contributor role within the Data & AI team, with scope to grow the privacy function across UK, EU and international entities and to build a culture of privacy by design.

Qualifications

• 5+ years' experience in a dedicated data privacy role within a regulated environment.
• Strong working knowledge of UK GDPR and EU GDPR with DPIAs, RoPA and DSAR processes end-to-end.
• Experience operating within a multi-jurisdictional group structure (UK, EU, APAC).
• Experience designing and embedding privacy governance documentation – policies, procedures, and escalation routes.

Responsibilities

• Lead the strategic and day-to-day agenda for data privacy at IG, partnering with Legal, Risk, Compliance, HR, Procurement, Technology, and Product teams.
• Support the governance framework for data privacy, including DPIAs, privacy by design, retention, RoPA and third-party due diligence.
• Own cross-border data transfers and maintain mechanisms (SCCs, UK IDTA, adequacy assessments).
• Manage breach notifications to regulators within required timelines and centralised privacy reporting to SLT/Board.
• Advise on privacy by design for new products and customer journeys; translate law into practical guidance.
• Manage complex privacy incidents and strengthen privacy awareness across the business.

Job description

Job TitleData Privacy ManagerJob DescriptionData Privacy ManagerAbout IG GroupIG Group is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions – built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.The bar is high – bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next.Join us at IG – the future gets built here.About the RoleIG's Data & AI team is scaling up how the business governs, understands, and trusts its data. As our Data Privacy Manager, you'll be the Group's central point of contact for data privacy - closing the gap between policy and practice, taking ownership of the RoPA process, DPIAs, DSAR protocol, retention practices, and breach reporting, and giving IG a single accountable home for data privacy compliance.About the TeamThis role sits within the Data & AI team, reporting into the Head of Data Governance & Strategy. This is an individual contributor role and the first hire into a newly centralised function, so it requires someone comfortable working on their own initiative and building relationships with stakeholders at all levels. As the function scales, this role will pick up direct reports.Key ResponsibilitiesAs Data Privacy Manager, you'll lead the strategic and day-to-day agenda for data privacy at IG, partnering closely with Legal, Risk, Compliance, HR, Procurement, Technology, and Product colleagues. You'll help evolve a privacy capability that is rigorous where it needs to be and practical everywhere it can be.Be the central point of contact for data privacy - act as the go-to for all data privacy related questions across the Group, from policy interpretation to practical guidance for staff at all levels.Support the governance framework - support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, RoPA and third-party diligence.Own cross-border data transfers - put in place and maintain the mechanisms that allow personal data to move lawfully between IG's UK, EU and international entities, such as Standard Contractual Clauses, the UK International Data Transfer Agreement, and adequacy assessments.Own the regulatory interface - manage breach notifications to the relevant regulator within the required regulatory timeframe, DPIA consultations, and centralised data privacy reporting to SLT/Board.Advise on privacy by design - advise product and business teams on the privacy implications of new products, changes and customer journeys.Translate law into practical guidance - translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.Manage complex privacy incidents - including regulatory notification and engagement with affected individuals where required.Strengthen privacy awareness - across the business and help build out the privacy function as it grows - running training programmes that go beyond policy awareness to cover breach recognition and escalation for all staff.Contribute to the Group's approach to data risk - across a broad range of business activity.Role Requirements5+ years' experience - in a dedicated data privacy role within a regulated environment.Strong working knowledge of UK GDPR and EU GDPR - together with practical awareness of other privacy regimes relevant to IG's international footprint, including practical experience running DPIAs, RoPA and DSAR processes end-to-end.Experience operating within a multi-jurisdictional group structure - (e.g. UK, EU, APAC).Experience designing and embedding privacy governance documentation - policies, procedures, and escalation routes, ideally in an organisation without an existing dedicated function.Comfortable acting as the primary point of contact - for regulators, and for internal Audit and Risk stakeholders, on data privacy matters.Strong communication skills - able to translate legal and regulatory requirements into practical guidance for Product, Technology, HR, and other business teams.Experience delivering data privacy training and awareness programmes.DesirableExperience in UK financial services or a similarly regulated industry.Practical exposure to AI/ML-related privacy considerations - (e.g. automated decision-making, Article 22).Professional certification in data protection/privacy - (e.g. CIPP/E, CIPM, BCS Certificate in Data Protection).The PerksIt really is more than a job. We think like a start-up, but we deliver like a FTSE 100 — so the bar is high, and we won't pretend otherwise. We work hybrid, which means three days in the office. We’ll recognise your talent and make sure that you can still have a life – at work, and outside of it. Networks, committees, awards, sports and social clubs, mentorships, volunteering opportunities, extra time off… the list goes on.Competitive salaryFlexible Benefits Package on top of your salary (12%)Private medical cover for you and your familyLife insuranceContribution to gym memberships25 Days holiday, with 1 additional day off to celebrate your Birthday & 2 additional days off a year for voluntary work (28 in total)The option to buy or sell holiday daysA comprehensive global and local onboarding processEnhanced primary (maternity), secondary (paternity), and shared parental pay and leave, as well as a range of support and benefits for parentsJoin us for this exciting journey. Apply now!Number of openings1