Data Privacy Manager

IG Group is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions – built on scale, trust, and proof.

We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses. The bar is high – bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next.

Join us at IG – the future gets built here.

IG's Data & AI team is scaling up how the business governs, understands, and trusts its data. As our Data Privacy Manager, you'll be the Group's central point of contact for data privacy - closing the gap between policy and practice, taking ownership of the RoPA process, DPIAs, DSAR protocol, retention practices, and breach reporting, and giving IG a single accountable home for data privacy compliance.

This role sits within the Data & AI team, reporting into the Head of Data Governance & Strategy. This is an individual contributor role and the first hire into a newly centralised function, so it requires someone comfortable working on their own initiative and building relationships with stakeholders at all levels. As the function scales, this role will pick up direct reports.

As Data Privacy Manager, you'll lead the strategic and day-to-day agenda for data privacy at IG, partnering closely with Legal, Risk, Compliance, HR, Procurement, Technology, and Product colleagues. You'll help evolve a privacy capability that is rigorous where it needs to be and practical everywhere it can be.

• Be the central point of contact for data privacy – act as the go-to for all data privacy related questions across the Group, from policy interpretation to practical guidance for staff at all levels.
• Support the governance framework – support the development of the data privacy governance framework, from DPIAs and privacy by design to retention, RoPA and third-party diligence.
• Own cross-border data transfers – put in place and maintain the mechanisms that allow personal data to move lawfully between IG's UK, EU and international entities, such as Standard Contractual Clauses, the UK International Data Transfer Agreement, and adequacy assessments.
• Own the regulatory interface – manage breach notifications to the relevant regulator within the required regulatory timeframe, DPIA consultations, and centralised data privacy reporting to SLT/Board.
• Advise on privacy by design – advise product and business teams on the privacy implications of new products, changes and customer journeys.
• Translate law into practical guidance – translate UK privacy law into clear, proportionate recommendations that enable responsible decisions.
• Manage complex privacy incidents – including regulatory notification and engagement with affected individuals where required.
• Strengthen privacy awareness – across the business and help build out the privacy function as it grows – running training programmes that go beyond policy awareness to cover breach recognition and escalation for all staff.
• Contribute to the Group's approach to data risk – across a broad range of business activity.

• 5+ years' experience – in a dedicated data privacy role within a regulated environment.
• Strong working knowledge of UK GDPR and EU GDPR – together with practical awareness of other privacy regimes relevant to IG's international footprint, including practical experience running DPIAs, RoPA and DSAR processes end-to-end.
• Experience operating within a multi-jurisdictional group structure – (e.g.…