Senior Data Protection Manager

Monzo

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts, accounts for 16-17 year olds, a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save, invest and combine their pensions with us.  With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ ----------------------------------------------------------------------------------------------------------------------------------   📍London or Remote (UK)  | 💰 £71,400 - £90,000 + Incentive Awards tied to your performance + Benefits  🌟 About the team: Our Global DPO Office  As Monzo grows into new countries, new products and innovative technologies, including AI, we work to find a careful balance between meeting our regulatory obligations and supporting innovative, customer-centric solutions that help make money work for everyone. At Monzo, we use the three lines of defence approach to manage risk. The Global DPO Office sits in the second line Compliance function, and this role reports directly to the Data Protection Officer. The Global DPO Office supports the DPO in meeting their responsibilities and provides independent oversight of data protection compliance across Monzo. We work closely with the first-line Data Protection team, Legal, and teams across the bank to help Monzo understand, evidence and strengthen its data protection compliance. We’re building the foundations for a global DPO Office that can scale, bringing more consistency to how we work across the UK and Europe through global processes, clearer governance and a group risk framework. About the role... We’re looking for a hands-on Manager who can support and lead important work across the DPO Office and the wider bank. You’ll turn broad goals into clear plans, work through complex and ambiguous problems, and deliver improvements with pace, structure and good judgement. This is an individual contributor role in a small and mighty team with high standards and a practical, proportionate way of working. You’ll provide advice, oversight and challenge, build trusted relationships across Monzo, and help improve how the Global DPO Office operates as we scale. It’s also a great opportunity for someone who wants to deepen their existing experience across DPO-level responsibilities. You’ll deputise for the DPO from time to time, while helping build the processes, governance and ways of working needed for a global DPO Office. 🔑 You’ll play a key role by…  * Working as part of the Global DPO Office to provide practical, proportionate data protection advice, oversight and challenge across the bank. * Reviewing DPIAs, providing DPO opinions, assessing data breaches, and supporting clear, well-documented decisions on regulatory reporting. * Supporting our relationship with regulators, improving the processes behind regulatory engagement and complaints, and providing oversight of data subject rights and contact point processes. * Supporting on and leading projects within the Global DPO Office at pace, and representing the team in projects led by others where data protection compliance is affected. * Working toward specific goals and workstreams within the DPO Office maturity plan, working with the DPO and wider team to build practical, scalable and efficient processes, governance and ways of working. * Proactively finding opportunities to improve how we work, including through better use of data, automation, AI and other tools that help us move faster without lowering standards. * Deputising for the DPO from time to time, giving you the opportunity to build experience across DPO-level responsibilities. 🤩 We’d love to hear from you if… * You’re a practical, experienced data protection professional with strong knowledge of UK GDPR, PECR and ICO expectations, backed by a relevant qualification such as an IAPP qualification or equivalent. * You’re curious about AI and innovative technology, and are already using or exploring how to use AI practically in your work. * You’re a self-starter who enjoys solving complex and ambiguous problems, using your initiative to work methodically, find clear and proportionate solutions, and deliver tangible improvements. * You have hands-on experience across core DPO work, including DPIAs, data breaches, privacy notices, governance, reporting and regulator-facing activity. * You understand what good second-line oversight looks like, and can build trusted relationships while still providing effective advice, oversight and challenge. * You’re a thoughtful communicator who enjoys working with teams across the company, sharing knowledge, influencing well and working through problems early, with solutions in mind. The Interview Process: Our interview process involves three main stages:  1. Recruiter Call (30mins) 2. Initial Call (30 mins) 3. Final stage - a take-home task, with successful candidates progressing to a role-specific interview and a behavioural interview Our average process takes around 4-6 weeks but we will always work around your availability.  🙌 What’s in it for you * 💰 £71,400 - £90,000 + Incentive Awards tied to your performance benefits. * 📍 This role can be based in our London office, but we're open to distributed working within the UK (with ad hoc meetings in London). * ⏰ We offer flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team. * 📚 £1,000 learning budget each year to use on books, training courses and conferences. * 🏡 We will set you up to work from home; all employees are given MacBooks and for fully remote workers we will provide extra support for your work-from-home setup. * ➕ Plus lots more! Read our full list of benefits. We have some guidelines on using Artificial Intelligence (AI) to ace an application and interview at Monzo. You can read them here. We're hiring for both a Data Protection Manager and a Senior Data Protection Manager. Please apply for the role that best matches your skills and experience. There's no need to apply for both roles, we'll consider you for the most appropriate opportunity. #LI-TK1 ---------------------------------------------------------------------------------------------------------------------------------- Equal opportunities for everyone Diversity and inclusion are a priority for us and we’re making sure we have lots of support for all of our people to grow at Monzo. At Monzo, we’re embracing diversity by fostering an inclusive environment for all people to do the best work of their lives with us. This is integral to our mission of making money work for everyone. You can read more in our blog, 2026 Diversity and Inclusion Report and 2025 Gender Pay Gap Report. We’re an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If you have a preferred name, please use it to apply. We don't need full or birth names at application stage 😊

Monzo

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts, accounts for 16-17 year olds, a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save, invest and combine their pensions with us.  With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ ----------------------------------------------------------------------------------------------------------------------------------   📍London or Remote (UK)  | 💰 £79,000 - £93,000 + Incentive Awards tied to your performance + Benefits 🌟 About the team: Our Borrowing (lending) business is growing rapidly across both existing products and with the planned launch of new initiatives. As our lending portfolio grows, our second line of defence Credit Model Validation team is growing with it - and we’re looking for a Credit Model Validation Manager to join us! Our Credit Model Validation team is crucial in providing independent oversight and challenge to our model development teams in the first line of defence to help Monzo grow safely and ensure that the models we use deliver good outcomes for our customers. We’re looking for someone (maybe you?!) to join our validation squad and provide expert independent validation and oversight across our suite of credit models, covering critical business disciplines such as credit strategy and impairment. You’ll have a particular focus on models used for customer-level decisioning and defining our credit strategies - such as underwriting scorecards, origination PD models and Net Present Value (NPV) / unit economics models - across all our lending products. Strong data and analytical skills are a must, as is deep expertise in credit risk modelling. You’ll have hands-on experience in either model validation or model development within a financial services environment, including practical experience using Python to develop, validate or analyse machine learning and statistical models. . In-depth knowledge of credit decisioning models would be a strong plus.  🔑 You’ll play a key role by… * Leading hands-on independent validation of models used for credit decisioning within our Borrowing strategies - covering a range of machine learning, decision science and NPV models. You will be ensuring that models are fit for purpose, appropriately governed, explainable and performing as expected * Supporting oversight and validation of broader credit risk models, including IFRS9, stress testing and economic response models * Developing deep understanding of Monzo’s credit models, and using this to provide impactful input and challenge to model developers to improve our modelling capabilities * Reviewing ongoing model performance monitoring to ensure our lending models perform within our risk thresholds, and providing support to our first line of defence teams when action is required * Performing statistical analyses to independently assess model performance, including developing challenger models where appropriate to test model assumptions and strengthen validation conclusions * Improving our Model Risk Framework, including overseeing our policies, standards and procedures to help embed best practice across the business. This means making sure we follow up-to-date regulatory guidelines, and adapt our processes to make sure they remain relevant as modelling techniques evolve * Writing clear and impactful model validation reports, and presenting the findings and actions in relevant committees * Partnering with colleagues in the first line of defence credit strategy and modelling teams - and wider risk teams across Monzo - to support the embedding of our model risk framework and establishing consistent validation standards across the organisation * Embracing new and innovative technology, including leading the adoption of AI tools to enhance our model validation approach  🤩 We’d love to hear from you if… * Have a strong background and practical experience in credit model development and/or validation - in particular with exposure to machine learning or statistical models used in credit decisioning, such as decision science scorecards, origination / underwriting PD models, and NPV / unit economics modelling * Are data driven, with strong analytical skills and deep understanding of statistical techniques for credit and model risk. Being able to get hands on with data is critical - so strong SQL and Python skills are essential, and experience with data visualisation tools such as Tableau, Looker or similar is a plus! * Understand how models are used in real-time decisioning and lending strategies, and how to balance commercial and risk outcomes * Have strong written and verbal communication skills, and are able to articulate problems and solutions using clear and simple language. This is particularly important for breaking down complex issues and priorities to non-experts * Have a track record of building and maintaining trusting relationships with stakeholders at all levels, and can provide effective and respectful challenge * Are impact-driven, and proactive in identifying issues and opportunities to improve outcomes for both our customers and our business * Are passionate about technology, and what we’re doing here at Monzo excites you! Our technology stack We rely heavily on the following tools and technologies (note we do not expect applicants to have prior experience of all them): * Google Cloud Platform for all of our analytics infrastructure * dbt and BigQuery SQL for our data modelling and warehousing * Python for data science and machine learning * Go to write our application code * AWS for most of our backend infrastructure The interview process:  Our interview process usually involves up to four main stages via Google Hangouts:  * An initial call with our recruiter * A call with our Senior Model Validation Manager, the hiring manager for the role  * A role-specific call with colleagues from our credit modelling teams. We’ll share a short case study in advance, but you won’t need to submit a written response; we’ll use it to guide the discussion during the interview. * A behavioural interview  🙌 What’s in it for you * 💰 £79,000 - £93,000 + Incentive Awards tied to your performance benefits. * 📍 This role can be based in our London office, but we're open to distributed working within the UK (with ad hoc meetings in London). * ⏰ We offer flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team. * 📚 £1,000 learning budget each year to use on books, training courses and conferences. * 🏡 We will set you up to work from home; all employees are given MacBooks and for fully remote workers we will provide extra support for your work-from-home setup. * ➕ Plus lots more! Read our full list of benefits. We have some guidelines on using Artificial Intelligence (AI) to ace an application and interview at Monzo. You can read them here. We’ll close this role once we have enough applications for the next stage, so please apply as soon as you can - we don’t want you to miss out! LinkedIn Tags: #LI-TK1 ---------------------------------------------------------------------------------------------------------------------------------- Equal opportunities for everyone Diversity and inclusion are a priority for us and we’re making sure we have lots of support for all of our people to grow at Monzo. At Monzo, we’re embracing diversity by fostering an inclusive environment for all people to do the best work of their lives with us. This is integral to our mission of making money work for everyone. You can read more in our blog, 2026 Diversity and Inclusion Report and 2025 Gender Pay Gap Report. We’re an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If you have a preferred name, please use it to apply. We don't need full or birth names at application stage 😊

Marshmallow

We’re on a mission to make migration easy. We started building Marshmallow in 2017. Since then, we’ve grown from 3 to 700+ people, gained unicorn status, raised ~£140M over three funding rounds, turned profitable, insured millions of drivers and lent millions in car loans. But we’re only just getting started. Our goal is to become one of the largest financial services providers in the world. Over the next 10 years we’ll grow exponentially, not only by scaling our existing products, but also by building new ones. To achieve our goals we need incredibly ambitious, commercially driven people who never settle for ‘good enough’. Marshmallowers are hungry for autonomy and ownership, and would rather improve than coast. Everyone raises standards and has an impact, with a focus on collective success over self-interest. We’ve created an environment where curious, tenacious people win and grow together. If that sounds motivating, this could be the place for you. About the Role We are looking for a skilled and experienced Senior Data Protection Compliance Specialist to strengthen our data protection function. Working closely with our designated Data Protection Officer (DPO) and wider Legal, Risk, Compliance and Technology teams, you will play a central role in driving and embedding a robust culture of data protection compliance across the organisation. This is a senior hands-on role with significant scope and visibility. You will be a subject matter expert and trusted partner to the business — shaping policies, managing complex compliance workstreams, and supporting the DPO in meeting the organisation's obligations under UK GDPR and the Data Protection Act 2018. Whilst you will not hold the formal DPO designation, you will operate at a high level of autonomy and expertise. London (hybrid, 3 days in office) What you'll be doing Data Protection Compliance: * Support and deputise for the DPO across day-to-day compliance activities, acting as a senior point of expertise for the business. * Lead the organisation's DPIA programme, conducting and reviewing assessments for new and changed processing activities and presenting outcomes to senior stakeholders. * Own and maintain the organisation's Record of Processing Activities (RoPA), ensuring accuracy, completeness, and regular review. * Manage the end-to-end handling of Data Subject Access Requests (DSARs) and other data subject rights requests, ensuring timely and legally compliant responses. * Lead on personal data breach management: triage, investigation, remediation tracking, and advising on ICO notification decisions in conjunction with the DPO. * Advise business functions on lawful bases for processing, consent management, data retention, and data minimisation. Policy, Training & Governance: * Develop, maintain, and implement data protection policies, procedures, and guidance documents, keeping them current with legislative and regulatory changes. * Design and deliver engaging data protection training and awareness programmes for staff across all business areas, including tailored sessions for high-risk teams. * Support the embedding of privacy-by-design and privacy-by-default principles in new projects, products, and systems. Third Parties & Transfers: * Review and negotiate data processing agreements (DPAs) and data sharing agreements, working closely with Legal and Procurement colleagues. * Advise on international data transfer mechanisms including IDTAs, Transfer Risk Assessments (TRAs), and Binding Corporate Rules. * Manage the organisation's supplier due diligence process from a data protection perspective. Monitoring & Horizon Scanning: * Monitor the regulatory landscape, including ICO guidance, enforcement action, and relevant case law, and translate developments into actionable organisational recommendations. * Assist in preparing for and managing ICO audits, investigations, or engagement as required. Your Expertise Essential: * Substantial experience (typically 5+ years) in a data protection compliance role, with a track record of managing complex workstreams independently. * Expert knowledge of UK GDPR, the Data Protection Act 2018, and PECR, and their practical application in a business context. * Hands-on experience conducting DPIAs, managing DSARs, and handling data breach responses. * Recognised data protection qualification such as CIPP/E, BCS Practitioner Certificate in Data Protection, or equivalent. * Strong communication and influencing skills - able to engage credibly with senior stakeholders and translate complex requirements clearly. * Ability to work with significant autonomy and manage competing priorities in a fast-paced environment. Desirable: * Experience in financial services (ideally within a fintech startup or scaleup environment). * Familiarity with cyber security frameworks (e.g. ISO 27001, NCSC guidance) and their relationship to data protection. * Exposure to EU GDPR compliance and cross-border data flow requirements. * Experience providing data protection guidance on AI, machine learning, or emerging technology. PERKS & BENEFITS * Bonus scheme designed to reward high performance * Private medical insurance with Vitality, mental health support with Oliva * Personal learning budget and 2 dedicated L&D days a year * Monthly flexible benefits budget to spend as you choose * 25 days holiday plus bank holidays * 4 weeks Work From Anywhere per year We are not in a position to offer sponsorship and/or a visa for this position. OUR PROCESS Here's what to expect: 1. Intro call with our Talent team (30 mins) 2. Skills and experience interview with the hiring manager (1 hour) 3. Task-based interview (1 hour) 4. Values and ways of working interview (1 hour) We review every application and will always let you know the outcome - though we're unable to provide individual feedback at application stage. Diversity of thought We know the best ideas come from having different perspectives in the room - and we're committed to hiring fairly, regardless of background, identity or experience. If you see yourself in this role, we'd encourage you to apply.