Data Privacy Expert

ACE Money Transfer; Pakistan; On-site; PKR 1,200,000 - 2,000,000; Full time

Job summary

ACE Money Transfer is seeking a Data Privacy Expert to enhance its privacy governance framework. This role involves ensuring compliance with data protection laws like GDPR while collaborating with the Data Protection Officer. The candidate will lead initiatives to foster a culture of privacy within the organization and maintain up-to-date knowledge of evolving regulations.

Qualifications

• Experience in data protection and compliance in financial services preferred.
• In-depth knowledge of GDPR and relevant data protection regulations.
• Strong written and oral presentation skills.

Responsibilities

• Monitor compliance with data protection legislation.
• Perform and document Data Protection Impact Assessments.
• Coordinate and respond to data subject rights requests.

Skills

Communication

Stakeholder Management

Project Planning

Analytical Skills

Leadership

Education

Relevant third-level qualification (e.g., Law, IT, Compliance, Data Governance)

Job description

About Us:

About ACE Money Transfer: ACE Money Transfer is a leading financial services provider committed to facilitating seamless and secure international money transfers. With a strong presence in the global remittance industry, ACE Money Transfer aims to provide efficient and affordable financial solutions to individuals and businesses worldwide.

Position Overview:

As a global leader in cross-border remittances, ACE Money Transfer is committed to protecting personal data and maintaining trust across all jurisdictions in which it operates. We are seeking a skilled Data Privacy Expert to strengthen our privacy governance framework across the ACE Group. This individual will work closely with the Data Protection Officer (DPO) to ensure privacy compliance and effective risk management aligned with global data protection regulations such as GDPR, UK DPA, and others relevant to our operations.

This role sits within the Compliance division and reports directly to the Data Protection Officer.

Key Responsibilities:

• Monitor and support compliance with data protection legislation across all ACE Group entities, including the General Data Protection Regulation (GDPR), UK Data Protection Act 2018, and equivalent international privacy frameworks.
  
• Advise the DPO and internal stakeholders on the interpretation and application of data protection laws and the implementation of privacy-by-design and by-default principles in business operations, systems, and projects.
  
• Perform and document Data Protection Impact Assessments (DPIAs) for high-risk processing activities, ensuring risks are appropriately assessed, mitigated, and recorded.
  
• Regularly review and assess data processing activities, maintain records of processing activities (RoPAs), and support development of technical and organizational measures to ensure ongoing compliance.
  
• Act as a central point of contact for supervisory authorities, assisting the DPO in facilitating cooperation and communication with data protection regulators across jurisdictions.
  
• Coordinate and respond to data subject rights requests (DSARs) including access, rectification, erasure, restriction, objection, and portability, ensuring statutory timelines and transparency obligations are met.
  
• Support data breach management and reporting, including identification, impact analysis, containment, notification (where required), and post-incident review in collaboration with the DPO and Information Security team.
  
• Champion privacy by design and by default, integrating privacy risk assessments into the product development lifecycle and third-party onboarding processes.
  
• Draft, review, and negotiate Data Processing Agreements (DPAs) and standard contractual clauses, ensuring appropriate safeguards are in place for cross-border data transfers and third-party processors.
  
• Maintain up-to-date knowledge of evolving data protection laws, codes of practice, and regulatory expectations globally, providing actionable insights to ensure the Group’s ongoing compliance and competitive positioning.
  
• Deliver regular privacy training and awareness programs tailored to specific departments (e.g. Marketing, Engineering, Customer Support), embedding a culture of privacy across ACE.
  
• Conduct privacy maturity assessments and help formulate ACE’s global data privacy roadmap, ensuring it aligns with the organization’s risk appetite and digital transformation objectives.
  
• Advise and assist internal teams (e.g. Legal, IT, Compliance, Marketing, Risk) on privacy considerations related to data analytics, automation, artificial intelligence, and new technologies.
  
• Document and maintain internal policies and procedures including data retention schedules, data classification guidelines, and incident response playbooks, in alignment with the Group Privacy Framework.

Qualifications and Competencies:

• Relevant third-level qualification (e.g., Law, IT, Compliance, Data Governance).
  
• Experience in data protection, legal compliance, or information governance role within the Financial Services sector is highly preferred.
  
• In-depth knowledge of GDPR, UK Data Protection Act, Irish Data Protection Act, and relevant EU regulations.
  
• Proven ability to interpret and apply legal and regulatory requirements in a practical business context.
  
• Strong communication and stakeholder management skills.
  
• Good project planning and analytical skills.
  
• Leadership skills to lead cross-functional teams.
  
• Initiative and enthusiasm, good written and oral presentation skills, meticulous attention to detail, creativity, excellent research skills, and the ability to assist and work in a team.

ACE Money Transfer Profile:https://acemoneytransfer.com/company-profile