Global Head of Privacy

This is an opportunity to join Ascot Group - one of the world’s preeminent specialty risk underwriting organizations.

Designed as a modern-era company operating through an ecosystem of interconnected global operating platforms, we’re bound by a common mission and purpose:
One Ascot. Our greatest strength is a talented team who flourish in a collaborative, inclusive, and entrepreneurial culture, steeped in underwriting excellence, integrity, and a passion to find a better way, The Ascot Way.

The Ascot Way guides our people and our organization. Our underwriting platforms collaborate to find creative ways to deploy our capital in a true cross-product and cross-platform approach. These platforms work as one, deploying our capital creatively through our unique Fusion Model:
Client Centric, Risk Centric, Technology Centric.

Built to be resilient, Ascot maximizes client financial security while delivering bespoke products and world class service — both pre- and post-claims. Ascot exists to solve for our clients’ brightest tomorrow, through agility, collaboration, resilience, and discipline.

Position Summary:

Reporting to the Head of Compliance (UK & Bermuda), Ascot Group is seeking a Global Head of Privacy to serve as a senior member of the Legal & Compliance team. This role will continue to develop and lead the global privacy function and advise on all matters relating to data protection, and data governance across all Ascot Group entities and jurisdictions.

The role will collaborate closely with the Heads of Compliance on privacy and data protection matters, and with the Group General Counsel on group-wide strategic privacy and data governance issues.

Responsibilities:

Lead Ascot Group’s global privacy strategy ensuring compliance with GDPR (UK/EU), PIPA (Bermuda), CCPA/CPRA (California), HIPAA (US), Data Protection Law (Guernsey) and other applicable laws and regulations.

Develop, maintain and enhance data protection policies and standards across the UK, US, Bermuda and Guernsey including training initiatives and monitoring.

Provide practical regulatory and commercial advice to senior stakeholders and the business on data privacy related matters.

Lead the response to data protection issues and breaches, partnering with Cybersecurity, Legal & Compliance leadership and other stakeholders to manage regulatory, legal, and reputational risk.

Develop and execute an annual data privacy protection plan, conduct Data Protection Impact Assessments (DPIA), remediate any identified issues.

Oversee the data privacy aspects of vendor and third-party relationships, including negotiating and maintaining Data Processing Agreements, conducting processor due diligence, and ongoing monitoring.

Manage and oversee Data Subject Access Requests (DSAR) across all jurisdictions, working with internal stakeholders and ensuring timely and legally compliant responses.

Oversee cross-border data transfer mechanisms (Standard Contractual Clauses, UK International Data Transfer Agreements, adequacy assessments), ensuring lawful transfers across Ascot Group’s global operations.

Advise on data protection requirements specific to the (re) insurance industry, including Lloyd’s of London (and other applicable regulators) market data standards, policyholder and claimant data handling, and data flows across distribution, underwriting, and claims operations.

Promote data protection awareness across the Ascot Group, including designing and delivering training and education sessions on key data protection issues.

Remain current on changing data protection laws and regulation in the UK, US, Bermuda and Guernsey (and any other applicable jurisdictions).Serve as the primary point of contact for data protection regulators, including the UK Information Commissioner's Office (ICO), the Bermuda Office of the Privacy Commissioner (Priv Com), (and other applicable regulators) and manage all regulatory correspondence, reporting, inquiries, and examinations.

Develop strong and positive relationships with the Ascot business and supporting functions including Risk, Operations, Information Security, Cyber Security, Human Resources and Marketing. Collaborate with…