Global Data Privacy Lead

FNZ; City of Edinburgh; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading company is seeking a Data Privacy Lead responsible for ensuring compliance with data privacy laws and regulations, including GDPR. The role involves overseeing data privacy efforts, developing robust processes, and engaging stakeholders to mitigate risks and enhance accountability. The ideal candidate will possess strong knowledge of global regulations and have significant experience in data governance.

Qualifications

• 5+ years in data privacy, information security, or data protection.
• Strong knowledge of GDPR, CCPA, and HIPAA.
• Experience in incident management and breach response.

Responsibilities

• Ensure compliance with UK GDPR and other regulations.
• Develop and maintain a privacy framework.
• Lead data breach investigations.

Skills

Data governance practices

Analytical skills

Problem-solving

Multi-tasking

Stakeholder management

Flexibility

Education

Bachelor’s degree in law

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Security

Bachelor’s degree in Business

Tools

OneTrust

TrustArc

Job description

Role Description

The Data Privacy Lead will be responsible for ensuring FNZ’s compliance with data privacy laws and regulations, including GDPR. This pivotal role will oversee data privacy efforts across both internal operations and FNZ’s platform, ensuring compliance for the products and services delivered to clients. The successful candidate will drive the implementation of robust privacy processes, mitigate data breach risks, and develop a culture of accountability and transparency.

Key Responsibilities:

1. Platform Compliance & Client Assurance

• Ensure the FNZ platform meets all relevant data privacy requirements, enabling seamless compliance for clients using the platform.

• Serve as the subject matter expert on privacy for platform development, providing guidance on embedding privacy by design and default.

• Liaise with clients and stakeholders to address data privacy inquiries and ensure contractual and regulatory obligations are met.

2. Privacy Governance & Compliance

• Develop, implement, and maintain a comprehensive privacy framework to support compliance with UK GDPR, POPIA, and other applicable global regulations.

• Oversee the completion and management of Data Protection Impact Assessments (DPIAs), Due Diligence assessments, and Records of Processing Activities (ROPAs).

• Manage internal and external privacy audits to demonstrate compliance and identify areas for improvement.

3. Risk Mitigation & Incident Management

• Identify, evaluate, and mitigate data privacy risks, with a focus on reducing the likelihood of data breach events.

• Develop and implement incident response procedures to ensure timely and effective management of privacy-related risks.

• Lead investigations of potential data breaches.

4. Stakeholder Engagement & Training

• Collaborate with cross-functional teams, including product, legal, compliance, and IT, to integrate data privacy best practices into all business processes.

• Provide training and guidance to internal teams to enhance data privacy awareness and maintain a culture of accountability.

5. Industry Standards & Continuous Improvement

• Stay updated on evolving data privacy regulations, standards, and best practices to ensure FNZ’s framework remains current and effective.

• Monitor and report on privacy KPIs, identifying opportunities to improve processes and reduce risk.

SKILLS & EXPERIENCE

• Significant proven experience in data governance practices

• Ability to prioritise and execute against critical deliverables, coupled with a sense of personal ownership for delivery

• Ability to demonstrate flexibility, multi-tasking skills and a ‘can do attitude’

• Ability to build and maintain strong, cohesive working relationships with senior stakeholders

• Knowledge of financial services industry

• Working experience with global teams and functions

• Bachelor’s degree in law, Computer Science, Information Security, Business, or a related field.

• 5+ years of experience in data privacy, information security, or data protection.

• Strong knowledge of global data protection regulations (e.g., GDPR, CCPA, HIPAA).

• Familiarity with privacy technologies like OneTrust, TrustArc, or similar tools.

• Strong understanding of privacy-by-design and default principles.

• Experience in incident management and breach response.

• Excellent analytical and problem-solving skills with attention to detail.

Preferred Certifications:

• Relevant certifications are highly desirable. CIPP/E, CIPP/US, CIPM, or CIPT from IAPP.

• ISO 27701 Lead Auditor/Implementer certification.

This is a business facing role and requires the ability to build strong relationships with stakeholders at all levels.

Organisational Design

This is role will require close working with IT, Risk and Compliance, Business Intelligence and business stakeholders at all levels

Role Responsibilities

• Strong leadership skills. Responsible for providing support and guidance to Data Privacy team.

• Driving several Data Privacy and Protection projects consecutively.

• In depth knowledge of relevant legislation including GDPR, privacy and information security industry standards and best practice and practical experience of their implementation in a business context

• Relevant professional/ project management qualification is desirable

• Self-starter, able to work independently

• Good communication and persuasive skills

• Experience of managing stakeholders to executive levels

#LI-CM1

About FNZ

FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back.

We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution.

We partner with over 650 financial institutions and 12,000 wealth managers, with US$1.5 trillion in assets under administration (AUA).

Together with our customers, we help over 20 million people from all wealth segments to invest in their future.