• Data Privacy Compliance Analyst

    Job Locations UK-Edinburgh
    # of Openings
    Risk and Compliance
    Position Type
    Permanent Full-Time
  • Role Description

    Data Privacy SME based within the second line of defence Risk & Compliance team and providing support and consultancy to FNZ (UK) Ltd and other group companies where applicable in relation to data privacy / data protection laws and regulations.


    The Data Privacy Compliance Analyst’s role is to work with the Senior Data Privacy Compliance Analyst to:

    • Promote a culture of data privacy compliance within the Company.
    • Assist the Company in maintaining its compliance with data privacy / data protection obligations.
    • Provide support to the Company’s Senior Management by providing assurance on the systems and controls connected with the Company’s data privacy obligations.

    Data Privacy Risk & Compliance Oversight

    • Providing consultancy and challenge to the business on data protection / data privacy on behalf of Risk & Compliance.
    • Maintaining and updating the Risk & Compliance data privacy policies and procedures in line with applicable legislation, regulations and codes of practice.
    • Maintaining and liaising with business owners to ensure the updating of the Company’s mapping of personal data, and maintaining and updating the Company’s Records of Data Processing.
    • Planning and undertaking (in liaison with the Compliance Monitoring team) detailed Compliance Monitoring Reviews on Data Protection where required and undertaking BAU monitoring where required. Carry out thematic reviews across the Company, identifying and recording issues arising from such work and pursuing them to resolution.
    • Providing consultancy and support to the business on responding to Data Subject Requests including DSARs
    • Assisting in the development and maintenance of mandatory data privacy training modules for all staff.
    • Providing training /workshops on aspects of data privacy compliance to business teams as required.
    • Contributing to MI and reports to the UK Board and management committees, as required.

     Regulatory Records

    • To maintain appropriate records and documentation relating to data privacy, including:
      • The Company’s Records of Data Processing as a Data Controller and as a Data Processor
      • Register of Personal Data breaches
      • Data Privacy Universe to support monitoring activity.
      • The Company’s Data Privacy Notices as a data controller.

    Regulatory Developments

    • To monitor the ICO, FCA and EU Commission websites for developments in regulation of data privacy and maintain an awareness of legislative changes and developments in industry best practice regarding data privacy.
    • Contributing to the implementation of data privacy regulatory developments that impact the Company or its client platforms.
    • Providing impact analysis on data privacy regulatory changes as required.

     Managing Relationships

    • Providing support and challenge to key business stakeholders in managing data privacy risks and issues within the business.
    • Liaising with external stakeholders including clients, auditors, third parties as required.



    Team Working

    • Sharing ideas to enhance cross-team learning and business development.
    • Building and maintaining relationships with internal and external parties.
    • Supporting the team’s efforts to succeed.
    • Balance team and individual responsibilities.
    • Exhibit objectivity and openness to others' views.

    Maintaining Operational & Company Standards

    • Supporting the organisation’s key business objectives whilst maintaining regulatory compliance.
    • Encouraging and driving quality and continuous improvement of processes used across the business.
    • Ensuring practices are compliant with regulatory bodies’ expectations.

    Personal Effectiveness

    • Ability to prioritise work and manage delivery targets within tight constraints, maintaining flexibility in respect of shifting business priorities.
    • Taking ownership for workload and is proactive in approach.
    • Good communication skills, using appropriate language and style of communication that is relevant to the situation and circumstances to influence.
    • Demonstrating sufficient self-awareness to identify personal strengths and areas for development.
    • Ability to analyse and problem solve.
    • Calm, reasonable and professional manner.
    • Ability to work under pressure.
    • Flexible to change, eager to improve and develop new skills.

    Experience Required

    • Previous experience in a data protection oversight and/or consultancy role, ideally within a financial services environment.
    • Good knowledge of GDPR and DPA requirements and related guidance.
    • Understanding of FCA rules and regulatory framework preferably gained through a compliance function.
    • Experience of a platform environment/ investment operations services an advantage.
    • Relevant professional or industry qualification.
    • Good communication, relationship management and influencing skills.
    • Ability to build and maintain effective internal and external relationships.
    • Ability to analyse, present and report regulatory information to stakeholders in a clear and concise manner.

    About FNZ

    FNZ is the market leading provider of technology and administration services to major financial institutions in the platform and wealth management sectors across the globe. We partner with life companies, banks, asset managers and discretionary wealth managers to enable them to develop and distribute financial products and services to their customers across all major distribution channels.


    FNZ has a strong blue-chip customer base including Standard Life, Axa Wealth, JP Morgan, HSBC, Friends Life, Zurich Financial, etc. It has helped customers grow to around £200 billion of platform assets in aggregate. FNZ now employs over 1300 people with offices in Edinburgh, London, Bristol, Brno (Czech Republic), Wellington, Sydney, Shanghai and Singapore.


    Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
    Share on your newsfeed