Global Compliance Manager – Data Protection Officer

Anthesis Group

. Own and manage Anthesis's global compliance and data protection framework across all jurisdictions .

Posted 10/26/2026full-timeSpainMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in global compliance and data protection, particularly in GDPR and international frameworks, while effectively managing compliance policies and risk assessments. Capable of advising senior stakeholders and leading data privacy initiatives across multiple jurisdictions.

Highest-signal resume keywords

Global Compliance ManagementData Protection ExpertisePolicy Drafting and GovernanceRisk-Based Client OnboardingPrivacy Compliance Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GDPR ComplianceData Protection FrameworksPolicy Inventory ManagementAML ChecksVendor Due DiligenceData Subject Access RequestsData Breach AdvisingRecords of Processing ActivitiesPrivacy Notices CreationData Processing Agreements

Soft Skills

Detail-OrientedPragmaticExcellent Written CommunicationExcellent Spoken CommunicationIndependent Advisory

Tools & Technologies

Technology SystemsAI GovernanceCompliance Monitoring ToolsData Protection RegistersSurveillance Audit Tools

Certifications & Qualifications

Privacy CertificationsCompliance Certifications

Industry Keywords

Multi-Jurisdictional ComplianceData ProtectionUK GDPREU GDPRUS State Privacy LawsOFAC SanctionsISO 27001DPIAsBreach RecoveryThird-Party Technology Assurance

About the role

Key responsibilities & impact

Own and manage Anthesis's global compliance and data protection framework across all jurisdictions
Maintain and develop compliance policies, policy inventory, and control matrix
Monitor compliance adherence and report to leadership
Run risk-based client onboarding, ongoing due diligence, beneficial-ownership verification, and AML checks
Support screening against UK, EU, US (OFAC), and UN sanctions lists
Deliver compliance and data protection training and embed a culture of compliance
Partner with Legal, IT & Tech, Finance, People & Development, and business lines
Support internal, client, SOC, ISO 27001 certification, and surveillance audits
Lead global privacy compliance covering UK & EU GDPR, US state privacy laws, and other applicable regimes
Conduct vendor and third-party due diligence and manage data processing agreements
Serve as named DPO where registration is required and contact for supervisory authorities and data subjects
Maintain Records of Processing Activities and mandatory data protection registers
Create privacy notices and handle Data Subject Access Requests
Advise on data breaches, data protection contracts, DPIAs, international data transfers, AI governance, and data retention/deletion
Own and maintain the Group Data Protection Policy and lead the Data Privacy Team
Ensure privacy-by-design, personal-data risk management, resilience, breach recovery, and third-party technology assurance in coordination with IT/Tech

Requirements

What you’ll need

Minimum 5 years' experience in a global / multi-jurisdictional compliance and/or data protection role
Strong, demonstrable data protection expertise (GDPR + international frameworks)
Policy drafting, governance and monitoring experience
Ability to advise senior stakeholders independently
Detail-oriented and pragmatic
Excellent written and spoken English
Legal qualification is desirable but not essential
Additional languages are desirable
Privacy / compliance certifications are desirable
Familiarity and comfort with technology systems and AI are desirable