Data Protection Officer – GDPR & Financial Compliance

About the role

We are seeking a Data Protection Officer (DPO) to lead GDPR compliance and financial‑industry data protection across our CFD/brokerage operations. The DPO will act as the main liaison with regulators, data subjects, and internal teams, ensuring that all personal and financial data is handled securely and lawfully.

Key responsibilities

• Monitor and enforce organization‑wide compliance with GDPR and relevant financial regulator data‑handling requirements (e.g., CySEC, FCA, ASIC).
• Serve as the primary contact for data protection authorities, regulators, and data subjects.
• Conduct Data Protection Impact Assessments (DPIAs) for new products, platforms, and third‑party integrations.
• Maintain and update the Records of Processing Activities (ROPA).
• Review and negotiate Data Processing Agreements (DPAs) with vendors, liquidity providers, and partners.
• Oversee KYC/AML documentation handling to ensure secure processing of sensitive data.
• Develop, implement, and refresh internal data protection policies, procedures, and staff training.
• Manage data subject access requests, complaints, and breach incidents within regulatory timeframes.
• Perform periodic audits and risk assessments of data handling across CRM, trading platforms, and marketing tools.
• Collaborate with IT/security teams to enforce encryption, access controls, and data retention policies.
• Stay updated on evolving data protection laws and advise senior management.
• Prepare and present compliance reports to senior management and regulators as required.

Required profile

• 3–4 years of experience as a Data Protection Officer, Compliance Officer, or Data Privacy professional, preferably in the CFD, Forex, or online trading sector.
• Bachelor’s degree in Law, Business Administration, Information Security, or a related field.
• Professional data‑protection certification (e.g., CIPP/E, CIPM, CDPO) is a strong advantage.
• Solid knowledge of GDPR and familiarity with data‑protection requirements of financial regulators such as CySEC, FCA, FSCA, ASIC.

Required skills

• GDPR compliance
• Data Protection Impact Assessments (DPIAs)
• Records of Processing Activities (ROPA)
• Data Processing Agreements (DPAs)
• Encryption techniques
• Access control management
• Data retention policy implementation