[Hiring] Data Privacy Specialist @Enstar Group

Role Description

The Data Privacy Specialist will sit in Enstar's Global Data Privacy team reporting to the Data Privacy Manager and working alongside colleagues in the UK and US. You will be providing day-to-day specialist data privacy advice across the Group so that personal data is handled lawfully, consistently and demonstrably in every jurisdiction in which Enstar operates. The role holder is expected to work across all disciplines of data privacy rather than specialising in specific areas and will coordinate with colleagues in other time zones. Enstar’s business is built on acquired portfolios, therefore the role involves working with inherited records, legacy systems, long retention tails and processing designed under a previous owner and exercising judgement about what to prioritise within those constraints.

Qualifications

• A minimum of four to six years of substantive, hands-on data privacy experience, ideally gained within a regulated financial services, insurance, or professional services environment.
• Relevant professional qualifications: CIPP/E, CIPM or equivalent.
• Demonstrable expertise in UK GDPR and the Data Protection Act 2018, with solid working knowledge of EU GDPR and at least one of: US privacy law (GLBA, CCPA/CPRA, state privacy laws), or Australian privacy law (Privacy Act 1988, APPs, NDB scheme).
• Demonstrable breadth across all disciplines of data privacy, rather than deep specialism in one or two areas.
• Practical experience of data subject rights at volume, including DSARs in a regulated sector context.
• Proven experience of conducting DPIAs and providing Privacy by Design advice to business stakeholders.
• Experience of negotiating and reviewing Data Processing Agreements and international data transfer mechanisms.
• Demonstrable experience of managing personal data breaches and advising on regulatory notification obligations.
• Ability to plan and deliver assigned workstreams to time, and to report progress.
• Ability to work productively and visibly in a remote setting across time zones.
• Clear written English, including policies and guidance that a non-specialist can follow.

Requirements

• Experience in the insurance or reinsurance sector, with familiarity with insurance-specific data processing activities (claims, underwriting, fraud prevention databases, actuarial processing).
• Further certification such as CIPM, CIPT or Fellow of Information Privacy, or a relevant legal qualification.
• Knowledge of the NAIC Insurance Data Security Model Law and state insurance commissioner notification requirements.
• Familiarity with the California Insurance Information and Privacy Protection Act (IIPPA) and its 2023 amendments.
• Experience of working within a multi-jurisdictional privacy programme spanning EEA, UK, US and/or Australian operations simultaneously.
• Experience of privacy due diligence and integration on mergers, acquisitions or portfolio transfers.
• Familiarity with ISO 27701, ISO 27001, SOC 2 or NIST, and with working alongside an information security team.
• Hands-on use of privacy management tooling, for example OneTrust or TrustArc, including consent management platforms.
• Technical literacy sufficient to read a data flow or architecture diagram and understand what deletion means across databases, logs, archives and backups.
• Interest in artificial intelligence governance and the emerging obligations under the EU AI Act.
• Legal qualification (solicitor, barrister or overseas equivalent) or privacy law academic background.

Benefits

• Pension (Enrolment is automatic on joining with a 10% employer contribution).
• Dental Insurance (This is an optional taxable benefit available to employee, spouse, and dependents).
• Medical Insurance (This is an optional taxable benefit available to employee, spouse, and dependents through a private health network).
• Travel Insurance (As an employee you are automatically enrolled with business and leisure travel insurance with single, couple, family, or single parent family coverage options).
• Eligible company funded annual 360 Health Assessment.
• Voucher for free annual eye examination.
• Option to loan a bicycle and safety equipment tax free.
• Wellness Reimbursement program (up to 700 pounds annual reimbursement for wellness related expenses, i.e, gym memberships, massage, etc.).
• Tusker – Electric Vehicle (A fixed monthly amount is taken directly from your gross salary and, in return, you get the use of a brand new electric car).
• Optional Critical Illness coverage.
• Automatic coverage provided by income protection programme.
• Access to Employee Assistance Programs (EAP) for health and wellbeing.
• One paid annual volunteer day.