Head Of Data Protection

At Mercuryo, we're at the forefront of enhancing decentralized finance (DeFi) with innovative payment use cases. Our goal is to redefine the finance experience, making sure everyone can easily access both web3 and traditional financial services. We're building a robust platform that makes dealing with crypto simpler and integrates it seamlessly into the broader financial ecosystem. Our mission is clear: to create a straightforward, user-friendly platform for businesses that are pioneering the next generation of consumer services with crypto.

Since launching in 2018, we've joined forces with web3 giants like MetaMask, Trust Wallet, Ledger, Jupiter, 1inch, PancakeSwap, powering over 200 dynamic products. This collaboration is driving the creation of innovative payment solutions within the web3 industry, involving direct engagements with prominent ecosystems such as Solana Labs, Consensys, and BNB Chain.

Why Mercuryo?

Industry Impact: Make a real difference by contributing to leading web3 projects that onboard millions of users into the new economy.

Innovative Environment: Join a team of over 200 professionals from the most dynamic sectors, including banking, SaaS, and web3, all committed to delivering the best user experience in the industry.

Growth and Learning: With partnerships spanning more than 200 top-tier B2B collaborations and a user base exceeding 7 million, the opportunities for professional growth are vast.

Flexible Culture: Embrace our remote-first policy that values diversity, with team members from over 29 countries, creating an environment where ownership and creativity thrive.

About the role  

We are looking for a Head of Data Protection to join our team and lead our data protection strategy and compliance across multiple jurisdictions. You will be responsible for ensuring that our company adheres to the highest standards of data protection and privacy, and that we comply with the relevant laws and regulations in the regions where we operate. You will also oversee the implementation and maintenance of our data protection policies, procedures, and systems, and provide guidance and training to our staff and partners on data protection matters. You will report directly to the Head of Risk and Compliance and work closely with other senior leaders and stakeholders across the company. 

Your Role:

• Develop and implement a data protection strategy and framework that aligns with our business objectives and complies with the applicable laws and regulations in the regions where we operate, such as the GDPR, the UK Data Protection Act, the CCPA, the upcoming APRA, and the PIPEDA.

• Monitor and evaluate the effectiveness and compliance of our data protection policies, procedures, and systems, and identify and mitigate any risks or gaps.

• Lead and coordinate data protection impact assessments, data breach investigations, and data subject access requests, and ensure that we respond to them in a timely and appropriate manner.

• Provide expert advice and guidance on data protection issues and best practices to our staff, partners, and customers, and foster a culture of data protection awareness and accountability across the company.

• Manage and maintain our data protection records, documentation, and reporting, and ensure that we meet our obligations under the relevant laws and regulations.

• Support the company with the development and assurance of its PCI DSS, Operational Resilience and DORA programs.

• Liaise and cooperate with data protection authorities, regulators, and other external parties on data protection matters, and represent our company in any data protection audits, inquiries, or disputes.

• Keep abreast of the latest developments and trends in data protection and privacy, and update our data protection strategy and framework accordingly.

What We're Looking For:

• A bachelor's degree or higher in law, information technology, or a related field.

• A minimum of 5 years of experience in data protection, privacy, or compliance, preferably in the crypto-asset, fintech, or digital asset industry.

• A solid understanding of the data protection and privacy laws and regulations in the regions where we operate, such as the GDPR, the UK Data Protection Act, the CCPA, the upcoming APRA and the PIPEDA, and their implications for our business.

• A proven track record of developing and implementing data protection strategies and frameworks, and managing data protection compliance and governance.

• Excellent communication, negotiation, and presentation skills, and the ability to explain complex data protection issues and concepts to various audiences and stakeholders.

• Strong analytical, problem-solving, and decision-making skills, and the ability to handle multiple tasks and projects in a fast-paced and dynamic environment.

• A high level of integrity, professionalism, and confidentiality, and the ability to handle sensitive and confidential data and information.

• A certification in data protection, privacy, or compliance, such as the CIPP, CIPM, or CIPT, is a plus.

• Fluent in English.

What We Love About You:

• Proven track record of implementing regulatory and compliance programs.

• A pragmatic mindset coupled with legal, compliance, or financial qualifications.

• Strong communication skills, both verbal and written, with the ability to tailor your approach to the audience.

• Proficiency in additional languages (advantageous but not necessary).

• Comfortable working autonomously in a small team.

• Willingness to share knowledge and experience with a young team.

• Inquisitive and confident in questioning the status quo.

• A good team player who thrives in a start-up environment.

• Impeccable work ethic and an entrepreneurial business mindset.

What We Offer:

• Competitive market rate salary and performance-based incentives

• 22 days annual leave with an additional 6 company days, plus bank holidays

• Comprehensive health insurance plans

• Extensive Benefits program

• Flexible work schedule and remote work options

• Professional development and training opportunities

• Opportunity to shape the initiatives you’re working on

• Diverse and friendly team

• We are open-minded to new ideas

We're hybrid-remote so you should be comfortable picking up new software tools for document drafting, collaboration and communication. Most of your colleagues will not share an office with you on a day-to-day basis.

Join Us

If you're driven to be a part of the web3 forefront and are keen to leave your mark on this rapidly evolving field, Mercuryo is an excellent choice. Discover our open positions and see how you can contribute to shaping the future