Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 1 hour ago

Global Compliance Manager & Data Protection Officer

Anthesis Group65 open roles

Where
Spain
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGlobal Compliance Manager & Data Protection OfficerAnthesis Group · Spain

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Anthesis Group's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Anthesis Group postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: first seen 1 hour ago

Anthesis Group median: 2 days open

The posting

The Global Compliance Manager owns and manages Anthesis's global compliance and data protection framework across all jurisdictions, ensuring the Group meets its regulatory, privacy, and client due-diligence obligations, and that policies are current, embedded, monitored and reported to leadership.

The Global Compliance Manager also holds the legal role of Data Protection Manager, and ensures that personal data risks are systematically identified, controlled and continuously improved within the ISO 27001 ISMS framework—turning privacy obligations into enforceable security controls.

Key Responsibilities

General Compliance responsibilities:

  • Compliance framework & policies: Maintain and develop the Group's compliance policies (e.g. anti-bribery & corruption, anti-fraud & tax evasion, AML, whistleblowing, code of conduct, conflicts of interest, and gifts & hospitality). Own the policy inventory and control matrix; monitor adherence and report to leadership.
  • Know Your Client (KYC) / due diligence & AML: Run risk-based client onboarding and ongoing due diligence, beneficial-ownership verification, and anti-money laundering (AML) checks.
  • Sanctions: Support in the screening of clients and counterparties against UK, EU, US (OFAC) and UN sanctions lists; consider red flags; maintain awareness of export-control considerations.
  • Training & culture: Deliver compliance and data protection training; embed a culture of compliance across the business.
  • Cross-functional partnering: Work closely with Legal, IT&Tech, Finance, People & Development and the business lines; support internal and client audits.
  • Working with external legal counsel on compliance and data protection matters
  • ISO 27001 & audit support: Support ISO 27001 certification and surveillance audits (and client or SOC audits where relevant) by providing privacy evidence, maintaining privacy controls in the ISMS and working with the Cyber Risk & Compliance team.

Data Protection responsibilities:

  • Lead global privacy compliance (UK & EU GDPR, US state privacy laws, and other applicable regimes). vendor/third-party due diligence and data processing agreements (DPAs).
  • Named DPO where registration required and serve as point of contact for supervisory authorities and data subjects
  • Development of group-wide policies and procedures required to implement global data protection compliance
  • Data Protection advisory for Technology, P&D, Marketing, Finance,
  • Maintenance of Record of Processing Activities (ROPA) and other mandatory registers and documentations under relevant data protection law
  • Creation and provision of privacy notices where required
  • Handle Data Subject Access Requests, liaising where relevant with Tech/IT Team
  • Advise on data breaches/incidents where relevant
  • Creation and delivery of data protection training where relevant
  • Review of data protection relevant contractual requirements (including, but not limited to, mandatory processor DPAs for GDPR compliance)
  • Conducting Data Protection Impact Assessments where relevant
  • Implementing Intergroup Data Transfer agreements to ensure compliance with international data transfer requirements
  • Review of data protection/privacy questionnaires and similar as part of onboarding, RfP, annual review etc.
  • Due Diligence on potential processors that engage AG and use AG personal data
  • Data protection representative on the AI Governance Committee
  • Act as the privacy and compliance contact for client due diligence, third-party risk management (inbound and outbound) and contractual negotiations on data protection, data deletion, sub-processors and AI use clauses
  • Support the Acceptable Use of AI Policy, the AI capability inventory and AI risk assessments; advise on EU AI Act deployer obligations, client disclosure and consent requirements for AI use, and AI-related data retention and deletion queries from clients
  • Data protection input on Cyber Security Working Group
  • Contribute to the Group data governance programme, including data classification, retention and deletion policy and process, and client data segregation, working with IT and Legal
  • Own and maintain the Group Data Protection Policy and lead the Data Privacy Team, including coordination with any Deputy DPO or privacy support roles
  • Any other relevant data protection requirements

Interface with IT/Tech Team: In coordination with IT/Tech Team, the successful candidate:

  • Privacy-by-design across technology platforms – ensures all systems, applications, and integrations embed data protection controls (access, encryption, logging) aligned with privacy regulations.
  • Personal data risk ownership in technology landscapes - identifies, assesses, and mitigates privacy risks arising from technology platforms are tracked within ISMS risk registers.
  • Data availability and protection in business continuity plan and disaster recovery - ensures business continuity and disaster recovery plans protect personal data confidentiality and integrity while maintaining availability during disruptions and crisis scenarios.
  • Breach, resilience, and recovery oversight - ensures privacy impact assessment, breach containment, secure recovery and post-incident remediation are built into incident and business continuity playbooks.
  • Third-party technology and resilience assurance - ensures vendors and service providers meet data privacy requirements, including tested recovery capabilities and contractual privacy safeguards.

Required experience & skills

Key requirements

  • Minimum 5 years' experience in a global / multi-jurisdictional compliance and/or data protection role.
  • Strong, demonstrable data protection expertise (GDPR + international frameworks).
  • Policy drafting, governance and monitoring experience.
  • Able to advise senior stakeholders independently; detail-oriented and pragmatic.
  • Excellent written and spoken English.

Desirable

  • Legal qualification (a plus, not essential: strong compliance professionals from non-legal backgrounds are welcome).
  • Additional languages
  • Privacy / compliance certifications
  • Familiarity and comfort with technology systems and AI
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Anthesis Group's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Anthesis Group's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Anthesis Group's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.