iwoca.co.uk - Data Privacy Analyst - Regulatory Compliance

• Experience. Experience in data protection or privacy operations, or in a compliance, legal, risk or operational role where data protection was a real part of the job. • Data protection knowledge. A solid practical understanding of UK GDPR, the Data Protection Act 2018 and PECR, and of how the ICO expects firms to apply them. Familiarity with the changes made by the Data (Use and Access) Act 2025 is an advantage. • Privacy operations and assessments. Hands-on experience of statutory work: DSARs, DPIAs, legitimate interests assessments, breach handling, ROPA maintenance or data processing agreement review. You may not have done all of these — but we want to see that you have done some of them properly. • AI and automation. A real interest in, and working understanding of, how data protection law applies to AI and automated decision-making. Enough technical fluency to see where a manual process could be automated, set out what is needed, and hold your own in a conversation with engineers. • Stakeholder management: Comfortable dealing directly with product, engineering, marketing, credit and operations teams, and able to give a non-specialist a clear answer they can act on rather than a legal summary. • Sector experience. Financial services or fintech, ideally in lending or payments. • Credentials. A privacy or AI qualification such as CIPP/E, CIPM, or ICO-recognised practitioner certificates — or working towards one. • Practical tooling. Experience using Claude Code, LLMs or privacy management platforms. • At iwoca, we prioritise a culture of learning, growth, and support, and invest in the development of our team members. We value thought and skill diversity, and encourage people to explore new areas of interest, adopt better tools – including AI – and apply sound judgement so our products and decisions improve over time. • We put a lot of effort into making iwoca a great place to work: • Offices in London, Leeds, Berlin, and Frankfurt with plenty of drinks and snacks. • Events and community-led groups, including running groups, padel, and monthly ping-pong and pool competitions.