Manager: Compliance Advisory and Data Protection - Griffin

About Griffin

Griffin is a fully regulated UK bank that powers the accounts and payments offerings of product-led fintechs and platforms like Uber, Yonder, Prosper, and Sidekick. By doing the heavy lifting behind the scenes, our customers can focus on delivering amazing customer experiences.

We’ve grown rapidly since our launch in 2024 and provide the banking backbone behind products in remittance, payroll, wealth, insurance, proptech, payments, neobanking, and more. We are moving into card issuing, stablecoin infrastructure, and agentic finance next.

Our Culture

We believe that smart, motivated, conscientious people thrive in high-trust, high-autonomy environments. We've been remote-first since 2017. Work here is asynchronous and fully flexible to help you get the most out of both your work and home life.

The Team

You'll join our Service guild and work across first-line operations, sales, and product. Working closely with Protect (our second line), you'll be the first person dedicated to compliance within the team. You'll define what great compliance solutions look like and implement them, keeping Griffin's products and customer outcomes in shape as we grow.

The Opportunity

We want compliance and data protection built into how we design, sell, and run our products. As our hands-on DPO and compliance adviser in the first line (the teams who run the business and own its risks), you'll bring regulatory expertise to help our operations, commercial, and product teams execute seamlessly.

What Success Looks Like

In your first year:

• You’ve taken ownership of our data protection agenda, driving improvements and keeping senior leadership informed.
• You’ve established strong relationships with operations, sales, and product teams, making processes smoother so they involve you early by default.
• You’ve guided at least one major launch (such as card issuing) from concept to live release.
• You’ve put clear governance and outcome monitoring in place for live products, establishing a strong compliance foundation for our second-line risk team (Protect).

What You'll Be Involved In

• Product Development: Turn regulation into clear requirements, customer journeys, T&Cs, and fair value assessments with data protection built in from the start.
• Product Lifecycle Management: Keep live products compliant through periodic fair value assessments, outcome monitoring, reviews, changes, and closures.
• Sales & Commercial: Help the commercial team check whether potential partners fit our risk appetite, and review sales material.
• Marketing: Work on marketing materials (ours and customers') to ensure compliance with regulations, internal policies, and financial promotion rules.
• Service (Operations): Build regulatory and data protection requirements into day-to-day operations with practical procedures and controls.
• Regulatory Change: Assess new regulatory requirements and guide relevant teams to implement necessary changes on time.
• Issues & Reporting: Investigate and resolve compliance issues, including personal data breaches, while reporting clearly on compliance risks and customer outcomes.
• Second Line Collaboration: Engage early with Protect (second line), share required evidence, and act on challenge.
• Data Protection Officer (DPO) Duties:
  • Advise teams on data protection obligations, including DPIAs and Transfer Risk Assessments (TRAs).
  • Monitor and audit compliance with UK GDPR, DPA 2018, PECR, and internal policies.
  • Train colleagues and raise data protection awareness.
  • Act as the primary contact for the ICO and data subject requests.

As DPO, you’ll report directly to our COO and have the independence required to perform your role effectively.

Your Background

We need a proactive doer who is comfortable tackling unfamiliar regulations and translating them into simple, clear, and compliant solutions.

Required Skills & Experience

• Compliance Experience: First-line (preferred) or second-line compliance experience in a UK-regulated firm (bank, e-money institution, or payments firm).
• Product Regulations Knowledge: Practical understanding of Consumer Duty, BCOBS, CASS, FISMA, Payment Services Regulations, MLRs, and HMRC reporting (BBSI/AEOI).
• Data Protection Expertise: Deep knowledge of UK GDPR, Data Protection Act 2018, PECR, and the Data (Use and Access) Act 2025.
• Regulatory Implementation: Hands-on track record of converting regulatory rules into practical requirements for product, sales, or ops teams.
• Critical Thinking & Challenge: Strong questioning mindset and the confidence to offer constructive, kind challenge when required.
• Written Communication: Exceptional writing clarity for documentation and internal policies.

Ideal Qualifications

• Specialist expertise in payments, cards, Consumer Duty, BCOBS, or financial promotions.
• Prior experience as a DPO (or working closely with one) in a regulated financial firm.

What We Offer

• Salary: £80,000 - £90,000 (DOE)
• Remote-First Flexibility: Work from anywhere in the UK.
• Work from Abroad: Up to 20 days per year.
• Time Off: 25 days annual leave, bank holidays, and a company winter shutdown between Christmas and New Year.
• Equity: Share options package.
• Pension: Auto-enrolment into our Penfold scheme.
• Health Insurance: Private medical coverage via Bupa (including family cover) and AIG life insurance.
• Wellbeing: Coaching and therapy sessions via Oliva.
• Parental Leave: Enhanced parental leave up to 6 months at full pay after two years of service.
• Tools & Setup: Claude subscription, premium software tools, and home office support.