SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: GBP 80,000 - 90,000 / annual
Griffin is a fully regulated UK bank founded in 2024 that powers accounts and payments for product-led fintechs and platforms including Uber, Yonder, Prosper, and Sidekick. The company provides banking infrastructure across remittance, payroll, wealth, insurance, proptech, payments, neobanking, and is expanding into card issuing, stablecoin infrastructure, and agentic finance.
You will join the Service guild as the first dedicated compliance professional in the first line of operations, working across operations, sales, and product teams. Reporting directly to the COO, you will serve as the Data Protection Officer (DPO) with full independence to shape compliance and data protection strategy as Griffin scales.
In your first year, success means taking ownership of the data protection agenda, identifying and implementing improvements, and providing senior leaders with an honest picture of compliance standing. You will establish yourself as a trusted partner to operations, sales, and product teams—someone who makes things smoother, not slower. You will guide major product launches (such as card issuing) from conception through go-live, and implement clear governance and outcome monitoring for live products.
Your responsibilities span:
- Product development: translating regulation into clear requirements, customer journeys, terms & conditions, and fair value assessments, with data protection built in from the start through product approval and launch.
- Product lifecycle management: maintaining compliance for live products through periodic fair value assessments, outcome monitoring, reviews, changes, and closures.
- Sales support: helping the commercial team assess whether potential partners fit risk appetite and reviewing sales materials.
- Marketing: ensuring marketing materials (internal and customer-facing) comply with regulation and company policies; challenging financial promotions appropriately.
- Operations: building regulatory and data protection requirements into Service procedures and controls that teams actually use.
- Regulatory change: interpreting new rules and ensuring the right teams make timely changes.
- Issues and reporting: investigating and resolving compliance issues, including personal data breaches, and reporting clearly on compliance risks and customer outcomes.
- Second-line collaboration: bringing Protect (the second-line risk and compliance team) in early, sharing evidence, and acting on their challenge.
- Data Protection Officer duties: advising teams on obligations (including DPIAs and transfer risk assessments), monitoring UK GDPR and data protection law compliance, training colleagues, and serving as the contact point for the ICO and data subject requests.
Griffin operates as a remote-first, high-trust, high-autonomy culture since 2017. Work is asynchronous and fully flexible. The company has a small London office in Moorgate available for those who want it, but there is no expectation to attend.
REQUIREMENTS:
Essential:
- Compliance experience in the first line (preferred) or second line of a UK regulated firm, ideally a bank, e-money institution, or payments firm.
- Practical knowledge of Consumer Duty, BCOBS, CASS, FISMA, Payment Services Regulations, Money Laundering Regulations, and HMRC requirements (BBSI, AEOI reporting).
- Expert knowledge of data protection law and practice, including UK GDPR, Data Protection Act 2018, PECR, and the Data (Use and Access) Act 2025.
- Hands-on experience translating regulation into practical requirements for product, sales, or operations teams.
- Curious, questioning approach; ability to ask the right questions before sign-off.
- Confidence to challenge clearly and kindly when something isn't right.
- Strong writing skills; Griffin places high importance on clarity and readability in documentation.
Ideal:
- Deep expertise in a specialist area such as payments, cards, Consumer Duty, BCOBS, financial promotions, or similar.
- Prior experience as a DPO or working closely with one in a regulated firm.
- Background in finance or banking.
