The Vacancy

Reporting to the General Counsel, you will take ownership of data protection and regulatory compliance across ASK4's European estate. That means converting legal and regulatory requirements into working documents, practical processes, and system changes, then verifying those changes stick.

The role spans consumer regulation across multiple markets, UK and EU data protection law, product compliance, and M&A integration work. You will pick up issues, take them to a defined position, and implement that position.

Key Responsibilities

• Own the consumer-facing regulatory document set across all markets — contract information documents, complaints codes, vulnerable customer policies, price transparency, and ADR signposting — keeping these current as products and prices change.
• Manage NIS2 registration and incident notification readiness across the EU estate, alongside data retention positions in each jurisdiction.
• Document data processing for acquired entities and new platforms: records of processing, data flows, lawful bases, and controller/processor positions.
• Build and maintain core data protection processes — DSAR handling, retention schedules, breach reporting, and the supporting SOPs.
• Run data protection and transfer impact assessments for new systems and suppliers; keep DPAs and sub-processor records current.
• Support the information security management system where it overlaps with data protection — this is a documentation and governance role, not a security engineering one.
• Lead the compliance workstream on integrations: assess incoming businesses, define requirements, write user stories, and evidence outcomes.
• Bring new products, platforms, and brands into the compliance framework from the outset rather than retrofitting afterwards.