SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Lendable is a UK fintech unicorn (800+ employees, profitable since 2017, backed by Balderton Capital and Goldman Sachs) rebuilding consumer finance products—loans, credit cards, and car finance—with modern technology and AI. The company is expanding into the UK and US markets.
You will join the Data Protection and Complaints Administration team as a Complaints and Data Rights Administrator, managing the end-to-end handling of Data Subject Access Requests (DSARs) and other data rights requests under UK GDPR and the Data Protection Act 2018.
Key responsibilities:
- Manage a caseload of DSARs and data rights requests (erasure, rectification, portability) from receipt through closure, tracking progress against strict statutory deadlines
- Liaise with cross-functional teams (Operations, Product, Engineering, Complaints) to locate and extract all relevant customer data from multiple internal systems
- Review and redact sensitive personal data to protect third-party information and apply relevant exemptions in line with policy and legal guidance
- Maintain accurate, auditable records of all requests, decisions, and rationale
- Communicate clearly with customers regarding request status and outcomes
- Identify and escalate complex, high-risk, or ambiguous requests to the Data Protection Officer or Legal team
- Contribute to continuous process improvement and champion AI tools to enhance DSAR efficiency and accuracy
- Maintain current knowledge of UK GDPR, Data Protection Act 2018, and ICO guidance
- Work effectively under pressure while managing fluctuating request volumes without compromising quality or compliance
The role is hybrid (three days in-office weekly at London/Kent location). You'll work in a small team of resourceful people solving complex compliance and data governance challenges.
REQUIREMENTS:
Essential:
- Strong organisational skills and ability to manage high-volume caseloads against strict statutory deadlines
- Excellent attention to detail, particularly when reviewing and redacting sensitive personal data
- Ability to work confidently across multiple internal systems to locate, extract, and compile customer data
- Clear written communication; ability to explain data rights and outcomes to customers in plain English
- Sound judgement in identifying and applying relevant exemptions; confidence escalating complex or high-risk requests
- Eye for continuous improvement and process efficiency
Desirable:
- Hands-on experience handling DSARs, subject access requests, or other data rights requests in a regulated environment
- Understanding of UK GDPR, Data Protection Act 2018, and ICO guidance
- Experience with redaction tools and case management systems
- Knowledge of financial services data (loans, cards, auto-finance) and its sensitivity
- Experience liaising with the ICO or handling escalated data protection complaints
