Data Privacy Specialist

About the Role The Data Privacy Specialist will work with Marex's Privacy Team to help meet GDPR and global privacy strategy obligations. Based in London, the role reports to the U.S. Data Privacy Senior Manager and is supported by the Group Data Protection Officer and the wider team. The role is varied, including tasks ranging from managing third-party risks and DPIAs to maintaining records of processing activities, handling data subject rights, breach investigations, and expanding the privacy programme to new jurisdictions and acquisitions. What You'll Do

• Document business processes by leveraging existing global processes.
• Coordinate risk assessments for processes involving personal data and assist in risk identification.
• Manage vendor profiles across applications and processes, including onboarding due diligence of third parties, contract reviews and negotiations.
• Highlight issues and work with the Data Privacy Senior Manager, the Group Data Protection Officer and the wider Privacy team to suggest privacy controls and updates to policies, procedures and contracts.
• Coordinate the review of existing processes (legal basis, purposes of use, etc.) ensuring ongoing compliance with record-keeping requirements.
• Help enhance Marex’s Privacy Framework so responsibilities and rights are understood by clients, staff and others whose data we store.
• Inform and advise data processors, data controllers and employees about their obligations under applicable privacy laws.
• Ensure privacy controls are adequately implemented and revised.
• Assist in coordinating data subject rights requests and incident/breach management processes.
• Support privacy programme expansion to new jurisdictions and privacy integration in acquisitions. What We're Looking For
• Required: Legal education (LLB and/or LLM; data protection specialization preferred); minimum 2 years’ data protection experience; highly skilled at relationship-building and organised; ability to summarise and present complex legal topics clearly; proactive problem-solver with persistence in chasing actions to completion; ability to progress multiple workstreams in parallel and re-prioritise as needed.
• Preferred: Understanding of material and non-material risk; experience with AI privacy controls; CIPP/A, CIPP/E or other IAPP certification, or willingness to complete; experience using OneTrust; experience with privacy regulations in other jurisdictions; track record of delivering business change projects on time, cost and quality. Nice to Have
• Desirable: AI privacy controls experience and ability to communicate the same to business stakeholders.
• Advantage: experience with privacy regulations in other jurisdictions.
• Certification: CIPP/A or CIPP/E or IAPP, or willingness to obtain.
• OneTrust experience; willingness to learn.