Integral Compliance Manager & Data Protection Officer Department: Enabling : Legal and Insurance

Employment Type: Permanent - Full Time

Location: Spain

The Global Compliance Manager owns and manages Anthesis's global compliance and data protection framework across all jurisdictions, ensuring the Group meets its regulatory, privacy, and client due-diligence obligations, and that policies are current, embedded, monitored and reported to leadership.

The Global Compliance Manager also holds the legal role of Data Protection Manager, and ensures that personal data risks are systematically identified, controlled and continuously improved within the ISO 27001 ISMS framework - turning privacy obligations into enforceable security controls.

Key Responsibilities General Compliance responsibilities:

Compliance framework & policies: Maintain and develop the Group's compliance policies (e.G. anti-bribery & corruption, anti-fraud & tax evasion, AML, whistleblowing, code of conduct, conflicts of interest, and gifts & hospitality). Own the policy inventory and control matrix;

monitor adherenceand report to leadership.

Know Your Client (KYC) / due diligence & AML: Run risk-based client onboarding and ongoing due diligence, beneficial-ownership verification, and anti-money laundering (AML) checks.

Sanctions:Support in the screening of clients and counterparties against UK, EU, US (OFAC) and UN sanctions lists;

consider red flags;

maintain awarenessof export-control considerations.

Training & culture: Deliver compliance and data protection training;

embed a culture of compliance across the business.

Cross-functional partnering:



Work closely with Legal, IT&Tech;, Finance, People & Development and the business lines;

support internal and client audits.

Working with external legal counsel on compliance and data protection matters

ISO 27001 & audit support:Support ISO 27001 certification and surveillance audits (and client or SOC audits where relevant) by providing privacy evidence, maintaining privacy controls in the ISMS and working with the Cyber Risk & Compliance team.

Data Protection responsibilities:

Lead global privacy compliance (UK & EU GDPR, US state privacy laws, and other applicable regimes). vendor/third-party due diligence and data processing agreements (DPAs).

Named DPO where registration required and serve as point of contact for supervisory authorities and data subjects

Development of group-wide policies and procedures required to implement integral data protection compliance

Data Protection advisory for Technology, P&D;, Marketing, Finance,

Maintenance of Record of Processing Activities (ROPA) and other mandatory registers and documentations under relevant data protection law

Creation and provision of privacy notices where required

Handle Data Subject Access Requests, liaising where relevant with Tech/IT Team

Advise on data breaches/incidents where relevant

Creation and delivery of data protection training where relevant

Review of data protection relevant contractual requirements (including, but not limited to, mandatory processor DPAs for GDPR compliance)

Conducting Data Protection Impact Assessments where relevant

Implementing Intergroup Data

📌 Global Compliance Manager & Data Protection Officer (La Pobla de Carivenys)
🏢 Anthesis
📍 La Pobla de Carivenys