Data Privacy Manager

As Data Privacy Manager at IG Group, you will own the privacy program within a scaling Data & AI function, driving governance, policy implementation, and cross-border data transfer controls. You’ll translate law into practical guidance for leaders across Legal, Risk, Compliance, Product, and Tech, and help build a growing privacy capability. Your work will protect customers and the business while enabling responsible data use at scale.

• flexible benefits package
• private medical cover for family
• life insurance
• gym membership contributions
• 25 days holiday + birthday and volunteering days
• hybrid work arrangement (three days in office)

• Lead the data privacy agenda across IG, collaborating with Legal, Risk, Compliance, HR, Procurement, Technology, and Product
• Be the central point of contact for all data privacy questions and provide practical guidance
• Support the governance framework, including DPIAs, privacy by design, retention, RoPA, and third‑party due diligence
• Own cross-border data transfers mechanisms (SCCs, UK IDTA, adequacy assessments)
• Manage regulatory interfaces, including breach notifications and privacy reporting to SLT/Board
• Advise product and business teams on privacy by design implications for new products and journeys
• Translate UK privacy law into clear, actionable guidance for decision-making
• Manage complex privacy incidents and regulatory notifications as needed
• Strengthen privacy awareness through staff training and function growth
• Contribute to Group data risk management across business activities

• 5+ years in a dedicated data privacy role within a regulated environment
• Strong knowledge of UK GDPR and EU GDPR; practical DPIAs, RoPA, DSAR end‑to‑end
• Experience in a multi-jurisdictional group structure (UK, EU, APAC)
• Experience designing and embedding privacy governance documents (policies, procedures, escalation)
• Comfortable as primary contact for regulators and internal Audit & Risk
• Strong communication skills translating legal requirements into practical guidance
• Experience delivering data privacy training and awareness programmes

• excellent communication
• stakeholder management
• proactive initiative
• DPIA execution
• RoPA management
• DSAR processing