Role overview

Qualifications

Relevant third-level qualification (e.g., Law, IT, Compliance, Data Governance)
Experience in data protection, legal compliance, or information governance role within the Financial Services sector is highly preferred
In-depth knowledge of GDPR, UK Data Protection Act, Irish Data Protection Act, and relevant EU regulations
Strong communication and stakeholder management skills

Responsibilities

Monitor and support compliance with data protection legislation across all ACE Group entities
Advise internal stakeholders on the interpretation and application of data protection laws
Perform and document Data Protection Impact Assessments (DPIAs) for high-risk processing activities
Act as a central point of contact for supervisory authorities, facilitating cooperation and communication with data protection regulators

Key facts

Remote from: Europe
Full time
Data Protection Officer
English

Hard skills

Data Security General Data Protection Regulation (GDPR) Privacy Law Risk Management Data Privacy Laws Legal Electronic Data Exchange Standard Privacy Impact Assessments Regulatory Compliance Data Governance

Other skills

Analytical Skills
Leadership
Teamwork
Communication
Detail Oriented
Research
Creativity

About the company

ACE Money Transfer

Digital Payments & Money Transfer

We are shaping the way people send money around the globe in the most reliable & trust-able way. We are offering a wide range of services, including Bank Deposit, Cash Pickup, Mobile Wallet even Mobile Top-up & Bill payments. We send to 106 countries around the world with over 2 million happy customers receiving payments through 379,000+ payout locations. We’ve helped millions of customers to send payments securely than ever—a money transfer service for everyone without borders or limits. If you think differently of innovative ways to provide a solution to problems, you might be the one we’re looking for.

Company details

IndustryDigital Payments & Money Transfer

Company size201 - 500

Links

LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

About Us:

ACE Money Transfer is a UK-based multinational company headquartered in Manchester, United Kingdom. ACE Money Transfer provides online remittance services to individuals in 29 countries across the UK, Europe, Canada, and Australia, enabling them to send money across borders in over 100 countries

Data Protection Expert (Remote from India)

Position Overview:

As a global leader in cross-border remittances, ACE Money Transfer is committed to protecting personal data and maintaining trust across all jurisdictions in which it operates. We are seeking a skilled Data Privacy Expert to strengthen our privacy governance framework across the ACE Group. This individual will be responsible for ensuring privacy compliance and effective risk management aligned with global data protection regulations such as GDPR, UK DPA, and others relevant to our operations.

This role sits within the Corporate Governance and Legal Affairs department and reports directly to the Manager, Corporate Governance and Legal Affairs.

Key Responsibilities:

Monitor and support compliance with data protection legislation across all ACE Group entities, including the General Data Protection Regulation (GDPR), UK Data Protection Act 2018, and equivalent international privacy frameworks.
Advise internal stakeholders on the interpretation and application of data protection laws and the implementation of privacy-by-design and by-default principles in business operations, systems, and projects.
Perform and document Data Protection Impact Assessments (DPIAs) for high-risk processing activities, ensuring risks are appropriately assessed, mitigated, and recorded.
Regularly review and assess data processing activities, maintain records of processing activities (RoPAs), and support development of technical and organizational measures to ensure ongoing compliance.
Act as a central point of contact for supervisory authorities, facilitating cooperation and communication with data protection regulators across jurisdictions.
Coordinate and respond to data subject rights requests (DSARs) including access, rectification, erasure, restriction, objection, and portability, ensuring statutory timelines and transparency obligations are met.
Support data breach management and reporting, including identification, impact analysis, containment, notification (where required), and post-incident review in collaboration with the Information Security team.
Champion privacy by design and by default, integrating privacy risk assessments into the product development lifecycle and third-party onboarding processes.
Draft, review, and negotiate commercial agreements, Data Processing Agreements (DPAs), Non-Disclosure Agreements (NDAs), and standard contractual clauses, ensuring appropriate data protection safeguards are embedded across all contractual arrangements, including cross-border data transfers and third-party processor engagements.
Create and maintain a comprehensive template library of data protection contracts and addenda, including Data Processing Agreements, Standard Contractual Clauses, data sharing agreements, NDA templates, and processor onboarding addenda, ensuring all templates remain current with applicable regulatory requirements.
Review already-executed contracts and agreements across the ACE Group to assess compliance with applicable data protection laws (including GDPR, UK DPA 2018, and equivalent international frameworks), identify gaps or deficiencies, and recommend remediation measures or renegotiation where required.
Maintain up-to-date knowledge of evolving data protection laws, codes of practice, and regulatory expectations globally, providing actionable insights to ensure the Group’s ongoing compliance and competitive positioning.
Deliver regular privacy training and awareness programs tailored to specific departments (e.g. Marketing, Engineering, Customer Support), embedding a culture of privacy across ACE.
Conduct privacy maturity assessments and help formulate ACE’s global data privacy roadmap, ensuring it aligns with the organization’s risk appetite and digital transformation objectives.
Advise and assist internal teams (e.g. Legal, IT, Compliance, Marketing, Risk) on privacy considerations related to data analytics, automation, artificial intelligence, and new technologies.
Document and maintain internal policies and procedures including data retention schedules, data classification guidelines, and incident response playbooks, in alignment with the Group Privacy Framework.

Qualifications and Competencies:

Relevant third-level qualification (e.g., Law, IT, Compliance, Data Governance).
Experience in data protection, legal compliance, or information governance role within the Financial Services sector is highly preferred.
In-depth knowledge of GDPR, UK Data Protection Act, Irish Data Protection Act, and relevant EU regulations.
Proven ability to interpret and apply legal and regulatory requirements in a practical business context.
Strong communication and stakeholder management skills.
Good project planning and analytical skills.
Leadership skills to lead cross-functional teams.
Initiative and enthusiasm, good written and oral presentation skills, meticulous attention to detail, creativity, excellent research skills, and the ability to assist and work in a team.

ACE Money Transfer Profile:https://acemoneytransfer.com/company-profile