Jobs, fresher vacancy - Head of Compliance SMF16 • Greater Manchester

Company: Together

Greater Manchester

Job DescriptionAs a Head of Compliance you will lead and oversee all compliance and data protection activities across the Group, ensuring adherence to FCA and ICO regulations. You will hold Senior Management Function 16 (Compliance Oversight) approval under the FCA's SM&CR and act as the statutory Data Protection Officer. You will provide strategic direction, advice and assurance to the Board and Executive Team, ensuring regulatory integrity, good customer outcomes and responsible data stewardship. The role provides independent second line of defence (2LOD) advice and assurance, as delegated by the Chief Risk Officer. The role will be part of the second line Group Risk Leadership team. As a Head of Compliance we are looking for someone to: Lead the development and implementation of the Group's compliance and data protection strategies and target operating modelEngage with and provide constructive challenges to senior management and Board committeesManage and develop a team of compliance and data protection professionals (c9 FTE)Develop and maintain policies, procedures and training programmes to ensure consistent compliance and data protection standardsLiaise with internal/external auditors, regulators and legal advisorsOwn and maintain the Group's compliance framework, ensuring alignment with FCA Principles, SYSC, MCOB and Consumer DutyDevelop and Oversee the Compliance Monitoring Plan and Compliance Universe using risk based prioritisation Provide expert compliance advice and guidance on regulatory requirements across business activities, including new initiatives, product development, operational change and customer communicationsConduct regulatory breach assessmentsLead horizon scanning and impact assessment of regulatory developments, translating FCA requirements into business plansAct as a primary point of contact with the FCA for engagement, notifications and information requestsAct as the Group's designated DPO in accordance with the UK GDPR, with specific reference to Articles 37-39Develop, implement and maintain a Data Protection Compliance Framework, including managing the associated activities such as the production and review of data protection policies, procedures, standards and training. Advise on and oversee Data Protection Impact Assessments ensuring data protection by design and by default is embedded in all relevant projects and initiatives including liaising with the regulator where requiredMonitor compliance with UK data protection laws and internal policies Lead the response to data protection incidents and personal data breeches