Reporting to the General Counsel, you will take ownership of data protection and regulatory compliance across ASK4’s European estate. That means converting legal and regulatory requirements into working documents, practical processes and system changes, then verifying those changes stick.
The role spans consumer regulation across multiple markets, UK and EU data protection law, product compliance and M&A integration work. You will pick up issues, take them to a defined position, and implement that position.
Key Responsibilities
- Own the consumer-facing regulatory document set across all markets — contract information documents, complaints codes, vulnerable customer policies, price transparency and ADR signposting — keeping these current as products and prices change.
- Manage NIS2 registration and incident notification readiness across the EU estate, alongside data retention positions in each jurisdiction.
- Document data processing for acquired entities and new platforms: records of processing, data flows, lawful bases and controller/processor positions.
- Build and maintain core data protection processes — DSAR handling, retention schedules, breach reporting and the supporting SOPs.
- Run data protection and transfer impact assessments for new systems and suppliers; keep DPAs and sub-processor records current.
- Support the information security management system where it overlaps with data protection — this is a documentation and governance role, not a security engineering one.
- Lead the compliance workstream on integrations: assess incoming businesses, define requirements, write user stories and evidence outcomes.
- Bring new products, platforms and brands into the compliance framework from the outset rather than retrofitting afterwards.
About You
You will have substantial experience in a regulatory compliance, data protection or GRC role, with genuine ownership of delivery — not just a track record of producing advice that others implement. You might have worked in-house or on the advisory side; what matters is that you can point to things you have built and verified.
We are also looking for:
- Strong working knowledge of UK and EU data protection law, with the ability to get up to speed quickly on unfamiliar regulatory regimes.
- Technical confidence — enough to understand how networks, platforms and business systems work and to distinguish a real compliance problem from a theoretical one.
- Clear, plain-English drafting skills that produce documents people can actually use.
- Comfort with ambiguity: able to take a proportionate decision, record the reasoning and elevate when something genuinely needs it.
- Confidence working across the business, including challenging and influencing at senior level.
A legal qualification is welcome but not required. Post-acquisition integration experience would be an advantage.
Diversity & Inclusion
We are committed to fostering an inclusive workplace where diversity is valued. We welcome applications from people of all backgrounds and identities and ensure fair treatment for all, regardless of protected characteristics under the Equality Act 2010.
We are happy to make reasonable adjustments throughout the recruitment process and beyond, to ensure it is accessible and fair for everyone. If you require any adjustments or would like to discuss your needs, please contact us at careers@ask4.com.
#J-18808-Ljbffr…