Senior DPO & Compliance Advisor — Data Protection (Remote)

Griffin Bank Ltd; United States; À distance; USD 107 000 - 120 000; Plein temps

Avantages offerts par ce poste

Remote-first UK

Private medical with family cover

Pension: Auto-enrolment

Share options: own a part of what wee

Flexible working

Résumé du poste

Griffin is a fully regulated UK bank powering the accounts and payments offerings of fintechs and platforms. We are a remote-first team seeking a Data Protection Officer to shape our data governance, DPIAs, TRAs, and ICO engagement, reporting to the COO, with independence to define the role as we scale.

Join a fast-growing organization that emphasizes clear writing, practical regulatory translation, and collaboration across product, sales and operations to protect customer data and outcomes.

Qualifications

• Compliance experience in the first (preferred) or second line of a UK regulated firm, ideally a bank, e-money institution or payments firm.
• Practical knowledge of the rules behind our products, like Consumer Duty, BCOBS, CASS, FISMA, the Payment Services Regulations and the Money Laundering Regulations. Familiarity with HMRC requirements like BBSI and AEOI reporting.
• Expert knowledge of data protection law and practice, including the UK GDPR, the Data Protection Act 2018, PECR and the Data (Use and Access) Act 2025.
• Hands‑on experience turning regulation into practical requirements for product, sales or operations teams.
• A curious, questioning approach. You know the right questions to ask before signing something off, not just the rules to check it against.
• The confidence to challenge, clearly and kindly, when something isn't right.
• A love of writing. We have a major amount of written documentation that you will be contributing to, and we place a high degree of importance on clarity and readability.

Responsabilités

• Product development: translate regulation into clear requirements and compliant product launches.
• Product lifecycle management: keep live products compliant through periodic assessments and monitoring.
• Sales: check early whether potential partners fit risk appetite and review sales material.
• Marketing: ensure promotions comply with regulation and policies.
• Service (Operations): embed regulatory and data protection into day-to-day workflows with controls.
• Regulatory change: interpret new rules and coordinate timely changes.
• Issues and reporting: investigate and fix compliance issues and report risks clearly.
• Working with second line (Protect): bring them in early and act on their challenges.
• Data protection: act as DPO, with DPIAs, TRAs, training, and ICO liaison.

Connaissances

Compliance experience

First line experience

Second line experience

UK regulated bank

Payments experience

Data protection knowledge

Strong writing

Communication

Description du poste

Griffin is a fully regulated UK bank powering the accounts and payments offerings of fintechs and platforms. We are a remote-first team seeking a Data Protection Officer to shape our data governance, DPIAs, TRAs, and ICO engagement, reporting to the COO, with independence to define the role as we scale.

Join a fast-growing organization that emphasizes clear writing, practical regulatory translation, and collaboration across product, sales and operations to protect customer data and outcomes.