Manager: Compliance Advisory and Data Protection

Griffin; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Job summary

Griffin is a fully regulated UK bank enabling fintechs and platforms with compliance-backed accounts and payments offerings. The role focuses on hands-on DPO and compliance advisory in the first line, shaping governance for card issuing and upcoming launches.

You will partner with operations, commercial and product teams to embed regulatory expertise and data protection from design through launch, driving strong compliance foundations.

Qualifications

• Regulatory expertise to help operations, commercial and product teams do exactly that.
• Experience implementing data protection and regulatory governance.
• Ability to translate complex rules into actionable requirements for teams.

Responsibilities

• Define what great compliance solutions look like and implement them for Griffin.
• Integrate regulatory change into product design, sales and marketing processes.
• Investigate and fix compliance issues and report risks clearly to leadership.
• Collaborate with Protect to ensure governance and outcome monitoring across products.
• Embed data protection and regulatory requirements into day-to-day Service operations.

Job description

About Griffin

Hi, we’re Griffin. We’re a fully regulated UK bank that powers the accounts and payments offerings of product-led fintechs and platforms like Uber, Yonder, Prosper, and Sidekick. By doing the heavy lifting behind the scenes, our customers can focus on what they do best - delivering amazing customer experiences.

We’ve grown rapidly since our launch in 2024, and today provide the banking backbone behind products in remittance, payroll, wealth, insurance, proptech, payments, neobanking and more.

We’re moving into card issuing, stablecoin infrastructure, and agentic finance next as we continue to support the next generation of product-led companies.

Learn more about what we do

Our culture

We believe that smart, motivated, conscientious people thrive in high-trust, high-autonomy environments and have done our best to create such an environment at Griffin. People who thrive here don’t require much hand-holding, and go out of their way to figure out how to contribute in the most valuable way possible.

We've been remote-first since we were established in 2017 and we remain so today. Work here is asynchronous and fully flexible - because we want to be a part of your life in a way that helps you to get the most out of both your work and home life.

We understand that our culture and ways of working aren’t for everyone, and we’re very intentional about our hiring process as a result. We won't hire people who don’t seem like a strong fit for our core values, even if they're otherwise extremely qualified.

Our strong culture has helped us to remain a mission-driven company as we have scaled, and gives our people a clear, explicit operating framework and the space to focus on delivering real value for our customers.

Learn more about our culture.

The Team

You’ll join our Service guild and work across first line operations, sales and produt. Working closely with Protect (our second line) you’ll be the first person dedicated to compliance within the team. You’ll define what great compliance solutions look like. Then implement them , keeping Griffin's products and customer outcomes in shape as we grow.

The opportunity

We want compliance and data protection built into how we design, sell and run our products. As our hands on DPO and compliance adviser, in the first line (the teams who run the business and own its risks), you’ll bring regulatory expertise to help our operations, commercial and product teams do exactly that. With card issuing and other launches coming up, there's plenty to get stuck into.

What success looks like

In your first year, you’ve taken ownership of our data protection agenda. You’ve gone looking for ways to improve, made the changes happen, and given our senior leaders an honest picture of where we stand. You’ve sought out our operations, sales and product teams and shown them that working with you makes things smoother, not slower. Now they bring you in early by default. You’ve guided at least one major launch, like card issuing, from first idea to go live. And you’ve put clear governance and outcome monitoring in place for our live products, so Protect (our second line risk and compliance team) sees fewer surprises and finds a stronger compliance foundation.

To do this you'll be involved in:

• Product development: turning regulation into clear requirements, customer journeys, T&C and fair value assessments, from first idea through product approval to launch, with data protection built in from the start.

• Product lifecycle management: keeping live products compliant through periodic fair value assessments, outcome monitoring, reviews, changes and closures.

• Sales: helping our commercial team check early whether potential partners fit our risk appetite, and reviewing sales material.

• Marketing: working on marketing materials, both ours and our customers’, to make sure they comply with regulation and our own policies, and that our financial promotions are properly challenged.

• Service (Operations): building regulatory and data protection requirements into how Service works day to day, with procedures and controls people actually use.

• Regulatory change: working out what new rules mean for us, and making sure the right teams make the right changes on time.

• Issues and reporting: investigating and fixing compliance issues, including personal data breaches, and reporting clearly on compliance risks and customer outcomes.

• Working with second line (Protect): bringing them