Marshmallow

1 month ago

Senior Data Protection Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Senior data protection compliance specialist responsible for supporting the DPO, leading DPIA workstreams, managing DSARs and data breach responses, and shaping data protection policies across Marshmallow’s Legal, Risk, Compliance and Technology teams in the UK.

Location: London

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Sr. Manager level

Key Responsibilities

•Support and deputise for the DPO across day-to-day compliance activities, acting as a senior point of expertise for the business
•Lead the organisation's DPIA programme, conducting and reviewing assessments for new and changed processing activities and presenting outcomes to senior stakeholders
•Own and maintain the organisation's Record of Processing Activities (RoPA), ensuring accuracy, completeness, and regular review
•Manage the end-to-end handling of Data Subject Access Requests (DSARs) and other data subject rights requests, ensuring timely and legally compliant responses
•Lead on personal data breach management: triage, investigation, remediation tracking, and advising on ICO notification decisions in conjunction with the DPO

Pay and Benefits

Perks:Annual BonusHealth InsuranceLearning Budget

Key Requirements

•5+ years of experience in a data protection compliance role with a track record of managing complex workstreams
•Expert knowledge of UK GDPR, the Data Protection Act 2018, and PECR and their practical application in a business context
•Hands-on experience conducting DPIAs, managing DSARs, and handling data breach responses
•Recognised data protection qualification such as CIPP/E, or an equivalent
•Strong communication and influencing skills with the ability to work autonomously and manage competing priorities

Experience:5+ yearsFintechFinancial servicesStartup

Skills:CommunicationInfluencingAutonomyStakeholder managementPrivacy

Certifications:CIPP/EBCS Practitioner Certificate in Data Protection

Company Brief

Marshmallow

Marshmallow is a UK-based insurtech that provides tech-driven motor insurance and financial products focused on migrants and underserved customers, using data and underwriting technology to offer fairer pricing and expand into wider financial services.

Industry: InsurTech

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Headquarters: London, United Kingdom

Founded: 2017

Glassdoor: 3.4

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Marshmallow

1 month ago

Senior Data Protection Compliance Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: London

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Sr. Manager level

Key Responsibilities

•Support and deputise for the DPO across day-to-day compliance activities, acting as a senior point of expertise for the business
•Lead the organisation's DPIA programme, conducting and reviewing assessments for new and changed processing activities and presenting outcomes to senior stakeholders
•Own and maintain the organisation's Record of Processing Activities (RoPA), ensuring accuracy, completeness, and regular review
•Manage the end-to-end handling of Data Subject Access Requests (DSARs) and other data subject rights requests, ensuring timely and legally compliant responses
•Lead on personal data breach management: triage, investigation, remediation tracking, and advising on ICO notification decisions in conjunction with the DPO

Pay and Benefits

Perks:Annual BonusHealth InsuranceLearning Budget

Key Requirements

•5+ years of experience in a data protection compliance role with a track record of managing complex workstreams
•Expert knowledge of UK GDPR, the Data Protection Act 2018, and PECR and their practical application in a business context
•Hands-on experience conducting DPIAs, managing DSARs, and handling data breach responses
•Recognised data protection qualification such as CIPP/E, or an equivalent
•Strong communication and influencing skills with the ability to work autonomously and manage competing priorities

Experience:5+ yearsFintechFinancial servicesStartup

Skills:CommunicationInfluencingAutonomyStakeholder managementPrivacy

Certifications:CIPP/EBCS Practitioner Certificate in Data Protection

Company Brief

Marshmallow

Industry: InsurTech

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Headquarters: London, United Kingdom

Founded: 2017

Glassdoor: 3.4

Website LinkedIn Glassdoor