Data Privacy Specialist (VN2942)

Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth and depth of coverage across four core services: clearing, agency and execution, market making, and hedging and investment solutions. It has a leading franchise in many major metals, energy and agricultural products, with access to 60 exchanges. The group provides access to the world's major commodity markets, covering a broad range of clients that include some of the largest commodity producers, consumers and traders, banks, hedge funds and asset managers. With more than 40 offices worldwide, the group has over 2,300 employees across Europe, Asia and the Americas.

For more information visit Working with the Privacy Team, the Data Privacy Specialist will play a key role in supporting the business in meeting its obligations in Privacy and Data Protection, through implementation of the Group's GDPR and Global Privacy Strategy. The role is in London, with a reporting line to the U.S. Data Privacy Senior Manager and will be supported by the Group Data Protection Officer and wider team.

The role is varied, including tasks ranging from managing third party risks, including conducting due diligence, informing contract negotiations, and liaising both internally and externally with the relevant stakeholders; identifying and maintaining comprehensive records of all data processing activities conducted by the company; assisting in overseeing the Data Protection Impact Assessments (DPIAs) or general risk assessments and monitor performance against these; answering to data privacy related enquiries; providing advice and recommendations about the interpretation or application of the data privacy rules and assisting the GDPO in managing Data Subject Right Requests or breach investigations.

You may also work on expanding the privacy programme to new jurisdictions and supporting privacy integration in acquisitions.

Additional tasks relate to privacy controls and developing and monitoring of the same.

• Documenting business processes by leveraging already documented global processes.
• Coordinating the risk assessments for the processes using personal data and assisting in the risk identification.
• Managing vendor profiles across applications and processes including the onboarding due diligence of third parties, contract reviews and negotiations.
• Highlighting issues and working with the Data Privacy Senior Manager, the Group Data Protection Officer and the wider Privacy team to suggest solutions for privacy controls related policies, procedures and contractual agreements.
• Coordinating the review of existing business processes, including legal basis, purposes of use etc. ensuring this continues to meet the requirements on record keeping.
• Assisting in enhancing Marex's Privacy Framework to ensure responsibilities and rights are understood by clients, staff, and other individuals whose data we store.
• Informing and advising data Processors, data Controllers and any employee involved in the handling of personal data, concerning their individual obligations under the applicable privacy laws.
• Assisting in ensuring the privacy controls are adequately implemented and revised.
• Assisting in co-ordinating the implementation of data subject rights and incident and breach management processes.

Required:

• Legal education is required. At minimum one legal degree but having both an LLB and an LLM is preferred. Specialisation to data protection already during studies is preferred.
• Professional experience in data protection for a minimum of two years.
• Highly skilled influencer, adept at relationship-building and organised.
• Ability to summarise and present complex legal topics in a clear and structured way.
• Proactive problem-solver who is tenacious at chasing down actions and resolutions to completion.
• Ability to progress multiple workstreams in parallel, reprioritise and absorb vast amounts of knowledge.

Preferred:

• Good understanding of material and non-material risk preferable and will be further enhanced through practical working experience.
• Desirable - working with AI privacy controls and communicating the same for the business stakeholders.
• CIPP/A, CIPP/E or another IAPP certification, or a willingness to complete
• Previous experience of using OneTrust is an advantage, but a willingness to learn is sufficient.
• Advantage - working experience with privacy regulations in other jurisdictions.
• Experience working on business change projects with people, process and technology changes, with track record of successful implementation to time, cost and quality.

If you're forging a career in this area and are looking for your next step, get in touch!

Marex is fully committed to being an inclusive employer and providing an inclusive and accessible recruitment process for all. We will provide reasonable adjustments to remove any disadvantage to you being considered for this role. We value the differences that a diverse workforce brings to the company. We welcome applications from candidates returning to the workforce. Also, Marex is committed to avoiding circumstances in which the appearance or possibility of conflicts of interest may exist within the hiring process.

If you would like to receive any information in a different way or would like us to do anything differently to help you, please include it in your application.