ABOUT MARSHMALLOW

We build financial products that accelerate the economic freedom for people who move across borders. We started with car insurance — insuring over a million drivers — and we’re scaling beyond. Tens of millions of people move countries each year, facing overlooked financial challenges. Our future is in building financial products around their needs to positively impact their lives.

HOW WE WORK

We’re really proud of the culture we’ve created. We push for progress every day, because we know that we’ll only hit big milestones by taking lots of smaller steps. We’re always open to helping our team mates, sharing our ideas, experience and knowledge to solve problems together. We take risks, think creatively and experiment relentlessly to meet our customer’s needs, and never pass blame when things go wrong. We encourage people at all levels to take ownership of their work, and to be bold in challenging how we do things. Everyone has a voice and the opportunity to make an impact.
And autonomy and ownership are only possible with clear direction. That’s why we collaborate to do in-depth planning twice a year, and make sure we leave with clear goals and objectives that flow from top to bottom. To make sure we’re as aligned as possible across functions, most of our work rolls up into three tribes; Acquisition, Retention & Claims. Each tribe has multiple teams embedded in it, working cross-functionally to do great work.
We’re so excited for all of the challenges up ahead, and we need more people to help us tackle them! If life at Marshmallow sounds like it could be for you, explore our Culture Handbook to find out more.
We’re looking for a Data Compliance Specialist to strengthen our approach to privacy across the Marshmallow group. You’ll help ensure we meet our obligations under data laws, regulations and associated guidance and best practice, including UK GDPR and the DPA, while working closely with teams to support product development and business change in a privacy-conscious way.
If you’re passionate about data, privacy, thrive in fast-paced environments, and want to work somewhere that’s genuinely mission-led — this could be your next move.

• Supporting the DPO in maintaining and enhancing our group-wide data protection programme.
• Advising on DSARs. DPIAs, data sharing agreements, and data protection clauses in commercial contracts.
• Helping teams across Tech, Product and Marketing implement privacy by design and default.
• Owning our Record of Processing Activities (RoPA) and SARs and data incidents.
• Monitoring compliance with relevant data protection laws and supporting internal audits.
• Supporting training and awareness across the company — making privacy approachable and practical.
• Owning the relationship and any interactions with the ICO