Compliance Manager (UK GDPR & Data Protection Officer) — Affirm, Remote UK
Affirm is reinventing credit to make it more honest and friendly — buy now, pay later without hidden fees or compounding interest. Its Legal, Compliance, and Public Affairs team is now hiring a Manager, Regulatory Compliance & Privacy for the UK entity, in a role that will act as the operational lead for UK privacy compliance and serve as the designated Data Protection Officer (DPO).
The Role & Impact
You'll lead and coordinate second-line regulatory compliance and privacy oversight for Affirm's UK business, partnering closely with Legal, Product, Engineering, Operations, Risk, and Financial Crimes to keep the UK compliance framework well-governed, scalable, and effective.
What You'll Do
- Act as the operational lead for UK privacy compliance and designated DPO for the UK entity
- Lead UK privacy governance: DPIAs, privacy risk assessments, incident and breach governance, data subject rights, retention and deletion, and regulatory documentation
- Drive the privacy MI dashboard and the Privacy Compliance Monitoring Programme (CMP), aligned to risk appetite and the regulatory landscape
- Support the enterprise-wide compliance risk assessment and control inventory
- Translate legal and regulatory requirements into compliance standards and governance routines for first-line stakeholders
- Provide second-line challenge and oversight of first-line controls — design review, gap identification, escalation, and remediation tracking
- Support audits, regulatory enquiries, and external reviews, plus recurring reporting for senior leadership
- Partner with regional and global Compliance partners for consistency across jurisdictions
What We Look For
- 6+ years in regulatory compliance, privacy compliance, risk, governance, or audit — ideally in financial services, fintech, or banking, with past DPO experience in regulated consumer credit a plus
- Strong understanding of UK GDPR, DPIA, breach processes, data subject rights, consumer protection, conduct risk, and vulnerable customer requirements
- Experience in a second-line-of-defence model with independent challenge of first-line controls
Why Affirm
Join a mission-driven fintech where compliance is "open for business" — remote-first in the UK, with real ownership over the privacy and compliance agenda of a fast-scaling consumer credit company.
🚀 Ready to Apply?
Similar Roles