Data Protection and Privacy Operations Lead EMEA

Columbia Threadneedle Investments; Greater London; On-site; GBP 95,000 - 135,000; Full time

Benefits offered by this job

In-office collaboration 4 days/week

Hybrid/onsite with occasional WFH day

Inclusive, performance-based culture

Job summary

Columbia Threadneedle Investments is seeking a privacy operations lead to manage non-U.S. data protection programs under the Global Privacy Office. You will partner with global teams to maintain compliance, address regulatory changes, and oversee DSARs and DPIAs across regions such as EMEA and APAC.

You will train staff, prepare risk reports, and drive process improvements while maintaining confidentiality and stakeholder trust in a fast-paced investment environment.

Qualifications

• Expertise with GDPR, EU AI Act and global privacy laws relevant to asset management in EMEA/APAC.
• Ability to analyse legislative requirements and map to practices.
• Proven experience in leading cross-functional, global teams.
• Strong analytical skills to assess privacy risk and impact.
• Experience managing complex privacy projects with multiple stakeholders.
• Discretion with confidential information and impartial decision making.
• Excellent written and verbal communication across audiences.
• Creative problem-solving with initiative and minimal supervision.
• Ability to prioritise conflicting demands and manage workload.
• Interest in evolving privacy technology and continuous improvement.

Responsibilities

• Act as Privacy Office liaison to non-U.S. CTI business and drive privacy program compliance.
• Maintain global CTI privacy program aligned with Global Privacy Office objectives.
• Collaborate with Information Security and CTI Compliance on program upkeep and implementation.
• Monitor regulatory changes across EMEA/APAC impacting privacy practices.
• Oversee Data Subject Rights requests and support HR and Transfer Agent teams.
• Prepare privacy risk and compliance reports with data analytics as needed.
• Contribute to privacy training content for staff and leadership.
• Lead data privacy DPIAs and DSARs with internal/external teams.
• Engage with data subjects and manage regulatory regulator needs.
• Provide leadership to a privacy team member assisting with DSARs/DPIAs.

Skills

GDPR & EU AI Act

Regulatory analysis

Global team collaboration

Analytical skills

Project management

Confidentiality & integrity

Communication skills

Innovative mindset

Prioritization

Learning new technologies

Tools

Privacy program tools

Job description

About Columbia Threadneedle Investments

Working at Columbia Threadneedle Investments you'll find growth and career opportunities across all of our businesses.

We're intentionally built to help you succeed. Our reach is expansive with a global team of 2,300 people working together. Our capability is diverse with more than 550 investment professionals sharing global perspectives across all major asset classes and markets. Our clients have access to a broad array of investment strategies, and we have the capability to create bespoke solutions matched to clients' specific requirements. Our unwavering focus on our clients and strong financial foundation connects each of our enterprise businesses — Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities.

Job Description

Where you’ll fit in & what our team goals are…

You will run, under the direction of the Ameriprise Global Privacy Office, data protection and privacy operations for the non-U.S. based business of Columbia Threadneedle Investments while supporting the broader CTI and Ameriprise data protection and privacy programs.

You will be a key member of the Global Privacy Office, actively contributing to its success and key initiatives, and partnering with colleagues to implement and continually improve the privacy programs.

How you'll spend your time...

• Act as Privacy Office’s primary liaison to the non-U.S. CTI business and partner with Privacy Risk Liaisons in business to drive privacy program compliance
• Help maintain global CTI privacy program in alignment with Ameriprise Global Privacy Office and company objectives
• Partner closely with Information Security and CTI Compliance colleagues on program maintenance, development and implementation
• Monitor, assess readiness to address, and implement regulatory changes in regions where we do business (across EMEA and APAC) that impact the privacy practices and obligations of the firm
• Support the Global Privacy Office effort to address the needs of non-U.S. based data protection & privacy regulators
• Maintain and update data privacy notices, policies, procedures
• Define data privacy requirements for and conduct Data Privacy Impact Assessments on projects as they arise
• Proactively identify and advise on potential control and process improvements
• Contribute to content for formal privacy training and conduct informal education sessions with business & staff groups and contribute to content for the Ameriprise-wide annual compliance training
• Direct & oversee the fulfilment of Data Subject Access Requests, providing support and guidance to the internal Human Resources and external Transfer Agent teams, and review documents for fulfilment of DSARs
• Interface directly with data subjects regarding requests to exercise rights
• Serve as people leader with accountability for an employee who will be assisting with DSARs, DPIAs and other privacy activities
• Prepare data privacy risk and compliance reports on a regular, periodic and incident driven basis, including any required data analytics for such reporting
• Engage meaningfully in the culture of the General Counsel’s Organization
• Operate consistent with principles of stewardship, operating effectiveness and leadership excellence

To be successful in this role you will have...

• Expertise with the General Data Protection Regulation, EU AI Act, as well as other global privacy laws, regulations, and industry guidelines, especially those relevant for the asset management industry in EMEA and APAC
• The ability to analyse legislative requirements and relate these to organisational practices and solutions
• Ability to effectively operate and partner as part of a global team, but with individual accountability on a day-to-day basis
• Demonstrated strong analytical skills, including the ability to assess risk and impact from a privacy and data protection perspective
• Experience managing complex projects, including prioritizing and working alongside cross-functional, global teams
• Highly professional with ability to handle confidential information, remain impartial and influence people at all levels internally and externally
• Excellent communication and interpersonal skills, with the ability to adapt to different audiences and leadership styles
• An innovative mindset with the ability to work on own initiative with minimal supervision
• Ability to juggle conflicting demands and effectively prioritise
• Aptitude for and interest in learning evolving technology
• Continuous improvement mindset

If you also had this, it would be great...

• Previous experience in a similar role within the asset management industry
• CIPP/E Certification (highly desirable)

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least four (4) days per week, with flexibility to work from home one (1) day per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Worker Sub Type

Permanent

Job Family Group

Legal Affairs

Columbia Threadneedle is a people business, and we recognise that our success is due to our talented people, who bring diversity of thought, complementary skills and capabilities. We are committed to fostering an inclusive and performance-based culture where everyone can belong, grow, contribute and realise their potential.

We appreciate that work-life balance is an important factor for many when considering their next move so please discuss any flexible working requirements directly with your recruiter.

Columbia Threadneedle Investments is an equal opportunity employer. We consider all qualified applicants without regard to racial or ethnic background, religion or belief, sex or gender, nationality, genetic information, age, sexual orientation, gender identity, disability, marital status, pregnancy or maternity or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to aid your participation in the application or interview process, speak to your recruiter to discuss how we can support you.