Privacy Associate

Behind every investment is a person with ambitions, motivations and values. While we know that every client is unique, they come to Nutmeg for the same reason: our straightforward and transparent approach to investing.

Nutmeg is a J.P. Morgan company offering award-winning investments, products and digital wealth management services to over 250,000 investors in the UK. We built the business from scratch, with constant innovation a core part of our ethos since the beginning. We aim to provide clients with the best digital investing experience, ensuring digital security and customer satisfaction – meaning you’ll have the opportunity to make a real difference.

Our Privacy team is at the heart of this venture, focused on getting smart ideas into the hands of our customers. We're looking for people who have a curious mindset, thrive in collaborative squads, and are passionate about Privacy. By their nature, our people are also solution-oriented, commercially savvy and have a head for fintech. We work in tribes and squads that focus on specific products and projects – and depending on your strengths and interests, you'll have the opportunity to move between them.

As a Privacy Associate at JPMorgan Chase within Nutmeg, your core responsibilities include providing advice and guidance to a broad range of stakeholders and to identify, escalate and mitigate privacy risks associated with day-to-day operations and business processes.

Job Requirements:

• Provide Privacy advice and guidance to the business, including carrying out Data Protection Impact Assessments and Privacy by Design and Default reviews.
• Support the Privacy programme’s operations and day-to-day governance activities, critical to bolster the firm’s compliance posture with applicable laws, rules, and regulations.
• Assist the Privacy Team with the design and execution of controls to address privacy business requirements and mitigate privacy risks, demonstrating the appropriate accountability to execute the 1st LOD Privacy operating model in adherence to Firmwide requirements.
• Ensure effective execution of privacy and data protection requirements, maintenance of privacy-related procedures and adherence to such procedures.
• Support team leads in the preparation of materials for Privacy, Business and Firmwide Committees and Forums to provide transparency through reporting on business privacy risks and issues, controls.
• Support the Privacy Team members and liaise with Privacy Compliance and Privacy Legal contacts, and participate in privacy workgroups, strategic projects or targeted reviews that require business engagement.
• Support audit, regulatory and compliance deliverables; assist in driving specific action plans and deliverables within the Control framework.
• Provide guidance and consultation to Privacy Operations to resolve privacy investigations and fulfil privacy requests.

Required qualifications, capabilities and skills:

• Knowledge on GDPR and UK DPA with experience working in a privacy function, ideally in a 1st LoD capacity at a large financial institution or fintech.
• Comfortable and experienced at working in a fast-paced, ‘agile’ environment.
• Demonstrated ability in dealing with different stakeholder groups including Product leads, Marketing, Technology and Operations.
• Ability to articulate and demonstrate thoughtful rationale in process and product design decisions with a geographically dispersed group of privacy, business and control professionals.
• Self-starter with problem solving skills, comfortable in making logical decisions when faced with ambiguous requirements and able to work with high degree of independence.
• Excellent written and verbal communication skills – ability to communicate effectively with business as well as technical stakeholders.
• Attention to detail combined with the ability to think and act strategically to deliver optimal, holistic outcomes.
• Intermediate level ability expected in all MS Office tools (Excel, PowerPoint, Word), SharePoint, JIRA, and Confluence.

Preferred qualifications, capabilities and skills:

• CIPPE and/or CIPM privacy accreditation a plus