Compliance Manager (Data Protection Officer, Regulatory Compliance & Privacy)

Location: Remote UK; occasional in-person work at an Affirm office and in-person onboarding may be required.

Base pay: £101,000–£149,000 per year.

Company

Affirm provides transparent financial products that allow consumers to pay over time and operates across consumer, merchant, and partner ecosystems.

What you will do

• Lead UK privacy compliance operations and act as the UK entity’s Data Protection Officer, subject to final organisational and regulatory approvals.
• Oversee DPIAs, privacy risk assessments, incident and breach governance, data subject rights, retention and deletion, and regulatory documentation.
• Develop the Privacy Compliance Monitoring Programme and contribute privacy metrics, consumer-outcome data, and recommendations to management information reporting.
• Support enterprise compliance risk assessments, control inventories, issue management, remediation tracking, and continuous improvement of the UK compliance framework.
• Provide second-line oversight and challenge of first-line controls across privacy, conduct, consumer protection, and vulnerable-customer programs.
• Coordinate audits, regulatory enquiries, partner reviews, senior reporting, and cross-functional implementation with Legal, Product, Engineering, Operations, Risk, Financial Crimes, and Compliance.

Requirements

• 6+ years of experience in regulatory compliance, privacy compliance, risk management, governance, audit, or a related control function.
• Experience preferably in financial services, fintech, banking, or another regulated environment; experience acting as a DPO in a regulated consumer credit firm is preferred.
• Strong understanding of UK privacy and regulatory compliance expectations, including UK GDPR, governance, DPIAs, breach processes, data subject rights, consumer protection, conduct risk, vulnerable customers, and related compliance programs.
• Experience operating in a second-line-of-defence model, including governance, oversight, monitoring, and independent challenge of first-line controls.
• Ability to translate legal and regulatory requirements into policies, standards, procedures, governance routines, and control expectations.
• Experience supporting audits, regulatory examinations, control reviews, or similar oversight processes in a regulated environment.
• Strong cross-functional partnership skills with Legal, Marketing, Product, Engineering, Operations, Risk, and Compliance stakeholders.
• Sound judgment, organisational discipline, discretion, and rigor when managing sensitive regulatory matters; ability to manage multiple workstreams and balance strategic design with daily execution.
• Experience preparing management reporting, governance materials, and escalation summaries for senior stakeholders.
• Bachelor’s degree or equivalent practical experience; relevant certifications.

Culture & Benefits

• Remote-first work model with flexibility within the country of employment.
• 100% subsidised medical coverage for employees and dependents, including dental and vision coverage.
• Monthly stipends for technology, health, and wellness spending.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan and potential equity rewards.
• Inclusive interview process with accommodations available for candidates with disabilities.

Hiring process

• Inclusive interview process with accommodations available on request.
• New hires attend an in-person onboarding experience.