{"id":3285889,"url":"https://alion.io/job/iwoca-data-privacy-analyst-regulatory-compliance","title":"Data Privacy Analyst - Regulatory Compliance","company":{"id":6070,"name":"iwoca","domain":"iwoca.co.uk","url":"https://alion.io/company/iwoca","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-11-15T07:52:55Z"}},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":175000,"period":"year","method":"role_country_seniority_unknown","sample_n":227},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Claude Code","optional":false},{"name":"GDPR","optional":false}],"status":"live","first_seen_at":"2026-10-26T14:52:35Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-15T06:08:07Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"The company\nSmall businesses move fast. Opportunities often don’t wait, and cash flow pressures can appear overnight. To keep going, and growing, SMEs need finance that’s as flexible and responsive as they are.\nThat's why we built iwoca. Our smart technology, data science and five-star customer service ensures business owners can act with the speed, confidence and control they need, exactly when it's needed.\nWe’ve already cleared the way for 100,000 businesses with more than £4 billion in funding. Our passionate team is driven to help even more SMEs succeed, through access to better finance and other services that make running a business easier. Our ultimate mission is to support one million SMEs in their defining moments, creating lasting impact for the communities and economies they drive.\nThe team\nThe Compliance team’s mission is to keep iwoca a safe and trusted lender for UK small businesses, and to make the compliant path the easy path for the teams we work with.\nWe make sure iwoca meets its regulatory obligations, particularly the financial crime, sanctions and data protection requirements that apply across our suite of products and services.\nWe are the second line of defence for the UK business. We advise the people building and running the business on what the rules require, set the policies and standards they work to, and test whether what happens in practice matches them. We work alongside the product teams so that each product meets its obligations and can grow.\nData protection is central to what we do. We hold the data privacy function for the UK business and own how iwoca handles personal data end to end: the lawful basis for how customer, applicant and third-party data is used; data subject access requests and other individual rights; personal data breaches; retention and deletion; records of processing; marketing and consent; the privacy review of new products and features; and the governance of automated decisioning and AI tooling.\nHow we work:\nWe enable rather than block. The answer is rarely just “no” - it’s what it would take to get to yes, and what the firm is accepting if it goes ahead anyway.\n\nWe go to the source. Positions are grounded in the actual rule, regulation or guidance, and we can show where they come from.\n\nWe’re proportionate. Controls match the risk in front of us. We don’t build process for its own sake.\n\nWe’re close to the business. We work directly with Tech, Data, Credit, Operations and Legal, and we want to be in the room early rather than at the end.\n\nThe role\nAs Data Privacy Analyst you will run iwoca’s day-to-day UK data protection work and help the business apply UK GDPR, the Data Protection Act 2018 and PECR in practice. Your primary focus will be the statutory core: data subject access requests, data protection impact assessments, legitimate interests assessments, personal data breaches and records of processing.\nThe role is not only to run that work but to improve it. A significant part of the job is identifying where our privacy operations could be automated, supported by AI or otherwise improved, assessing what each option would take and what it would mean for compliance, and specifying it well enough for our Tech and Data teams to deliver.\nThere is real room for the role to grow: as you build credibility, so does the scope, towards owning areas of the framework outright, leading on AI and automation governance, and taking a larger advisory remit across the business.\nYou will report to the Data Privacy Manager and work closely with the Head of Compliance who also acts as iwoca’s DPO, so you will have experienced support on the harder judgement calls. This is a hands-on role and the work is visible - much of it goes to senior stakeholders or to the regulator.\nImpact and influence\nIndividual rights and data breaches. Own data subject access requests from intake to response - scoping the search, applying exemptions and meeting the statutory deadline - along with erasure, rectification and objection requests. Triage and investigate suspected personal data breaches, assess them against the 72-hour notification test, and keep the breach register accurate.\n\nPrivacy assessments and advice. Assist with DPIAs, legitimate interests assessments and other privacy reviews on new products, features, suppliers and data flows. Be an accessible first point of contact for teams across iwoca with a data protection question, and give them an answer they can act on, early enough to shape what they build.\n\nRecords, policies and reporting. Keep the record of processing activities accurate as the business changes, hold the retention and deletion schedules to account, review data processing agreements with suppliers, help maintain our data protection policies and standards, and produce the privacy reporting that goes to senior stakeholders.\n\nAI and automated decisioning. Help assess AI tooling and automated decision-making across lending and operations: what personal data goes in, what lawful basis supports it, what the model does with it, and what rights customers have over the outcome. That includes the risks specific to these systems - decisions taken without meaningful human involvement, bias in outcomes, unreliable model output - and recommending how we address them.\n\nAutomation and improvement. Identify the manual steps in our privacy operations that should not be manual, assess the options, and set out the requirements and compliance implications clearly enough for Tech and Data to deliver them.\n\nThe requirements\n Essential skills\nExperience. Experience in data protection or privacy operations, or in a compliance, legal, risk or operational role where data protection was a real part of the job.\n\nData protection knowledge. A solid practical understanding of UK GDPR, the Data Protection Act 2018 and PECR, and of how the ICO expects firms to apply them. Familiarity with the changes made by the Data (Use and Access) Act 2025 is an advantage.\n\nPrivacy operations and assessments. Hands-on experience of statutory work: DSARs, DPIAs, legitimate interests assessments, breach handling, ROPA maintenance or data processing agreement review. You may not have done all of these - but we want to see that you have done some of them properly.\n\nAI and automation. A real interest in, and working understanding of, how data protection law applies to AI and automated decision-making. Enough technical fluency to see where a manual process could be automated, set out what is needed, and hold your own in a conversation with engineers.\n\nStakeholder management: Comfortable dealing directly with product, engineering, marketing, credit and operations teams, and able to give a non-specialist a clear answer they can act on rather than a legal summary.\n\nBonus:\nSector experience. Financial services or fintech, ideally in lending or payments.\n\nCredentials. A privacy or AI qualification such as CIPP/E, CIPM, or ICO-recognised practitioner certificates - or working towards one.\n\nPractical tooling. Experience using Claude Code, LLMs or privacy management platforms.\n\nThe culture\nAt iwoca, we prioritise a culture of learning, growth, and support, and invest in the development of our team members. We value thought and skill diversity, and encourage people to explore new areas of interest, adopt better tools - including AI - and apply sound judgement so our products and decisions improve over time.\nThe offices\nWe put a lot of effort into making iwoca a great place to work:\nOffices in London, Leeds, Berlin, and Frankfurt with plenty of drinks and snacks.\n\nEvents and community-led groups, including running groups, padel, and monthly ping-pong and pool competitions.\n\nThe benefits\nFlexible working hours.\n\nMedical insurance from Vitality, including discounted gym membership.\n\nA choice between a dedicated dental plan or a health cash plan that reimburses everyday medical expenses.\n\nA private GP service (separate from Vitality) for you, your partner, and your dependents.\n\n25 days’ holiday per year, an extra day off for your birthday, the option to buy or sell an additional five days of annual leave, and unlimited unpaid leave.\n\nA one-month, fully paid sabbatical after four years.\n\nInstant access to external counselling and therapy sessions for team members that need emotional or mental health support.\n\n3% Pension contributions on total earnings.\n\nAn employee equity incentive scheme.\n\nGenerous parental leave and a nursery tax benefit scheme to help you save money.\n\nElectric car scheme and cycle to work scheme.\n\nTwo company retreats a year: we’ve been to France, Italy, Spain, and further afield.\n\nAnd to make sure we all keep learning, we offer:\nA learning and development budget for everyone.\n\nCompany-wide talks with internal and external speakers.\n\nAccess to learning platforms like Treehouse.\n\nUseful links:\niwoca benefits & policies\n\nInterview welcome pack","description_format":"text","description_chars":8905,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Equity","Flexible schedule","Gym membership","Health insurance","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","Business & SME Lending"],"lifecycle":[{"event":"open","at":"2026-10-26T18:21:14Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-15T09:21:55+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.853,"p_room":0.9,"age_days":19,"expected_fill_days":52,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/iwoca-data-privacy-analyst-regulatory-compliance","json_url":"https://alion.io/job/iwoca-data-privacy-analyst-regulatory-compliance.json","meta":{"generated_at":"2026-11-15T12:41:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2812,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6070},"rest":"https://alion.io/mcp/rest/get_company?id=6070"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiwoca-data-privacy-analyst-regulatory-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiwoca-data-privacy-analyst-regulatory-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiwoca-data-privacy-analyst-regulatory-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iwoca-data-privacy-analyst-regulatory-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiwoca-data-privacy-analyst-regulatory-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3285889}},{"tool":"search_jobs","arguments":{"company":"iwoca.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3285889},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}