Marex has unique access across markets with significant share globally both on and off exchange. The depth of knowledge amongst its teams and divisions provides its customers with clear advantage, and its technology-led service provides access to all major exchanges, order-flow management via screen, voice and DMA, plus award-winning data, insights and analytics.

DESCRIPTION OF DEPARTMENT

The Risk department at Marex is a vital component of the organization, responsible for maintaining the integrity and stability of its global operations. With an extensive understanding of market dynamics and regulatory requirements, the Risk team ensures that Marex consistently navigates the complex financial
landscape with prudence and foresight. Collaborating closely with other divisions and leveraging technology, the department continuously monitors and manages various forms of risk, including market, credit, operational, change, and privacy. By fostering a robust risk culture and providing crucial insights to decision-makers, the Risk department plays an indispensable role in safeguarding Marex’s reputation and ensuring the continued success of its technology-driven, customer-centric approach.

ACCOUNTABILITIES

Duties include, but are not limited to:

• Develop, maintain, and enhance data protection policies and procedures to foster a culture of privacy compliance across the Group.
• Support the implementation and monitoring of the Group’s privacy framework across the APAC region, ensuring compliance with local data protection laws.
• Manage third-party onboarding, including conducting privacy due diligence, reviewing contracts, and supporting negotiations.
• Coordinate the review and assessment of business processes to ensure ongoing compliance with Article 30 record-keeping obligations.
• Carry-out Data Protection Impact Assessments (DPIA), assisting with risk identification and mitigation strategies.
• Support the enhancement of Marex’s Privacy Framework to ensure clear understanding of responsibilities and rights among clients, employees, and other data subjects.
• Assist in reviewing, improving, and maintaining privacy controls to ensure effectiveness and alignment with regulatory standards.
• Support the management of data subject rights requests and privacy incident/breach response processes.
• Draft, update, and implement policies, procedures, and governance documents, tailored to local jurisdictional requirements.
• Provide day-to-day support for the Privacy Team’s business-as-usual activities.
• Independently lead and manage data privacy projects, offering expert guidance to stakeholders across the business.
• Drive the implementation and administration of the OneTrust privacy management platform.
• Conduct research on regional data protection laws and support implementation of privacy controls across jurisdictions.
• Act as a subject matter expert (SME) for APAC, building strong relationships with internal and external stakeholders.
• Understand and evaluate business processes to ensure compliance with applicable privacy requirements and remain abreast with industry developments.
• Proactively identify privacy-related issues and collaborate with the wider team to recommend and implement effective solutions for controls, policies, and contractual terms.
• The Company may require you to carry out other duties from time to time

SKILLS AND EXPERIENCE

• Experience working full time in data privacy required, minimum 2 years.
• Desirable – working with developing privacy controls and communicating the same for the business stakeholders.
• Advantage - working experience with privacy regulations in other jurisdictions.
• Experience working in a financial sector or another regulated environment and knowledge of the risk and compliance requirements associated with this.

ROLE SUMMARY

As a Data Privacy Specialist, you will be an integral part of a growing and dynamic team, supporting the organization in meeting its global and regional data protection obligations. Based in Singapore, you will play a key role in implementing and monitoring the Group’s Global Privacy Strategy across the APAC regions including Singapore, Hong Kong, Australia, working in close collaboration with the London and US based Privacy Team.
This role offers strong support and professional development opportunities through on-the-job learning, cross-training, internal and external training program, and task rotation. You will work alongside experienced privacy professionals across multiple jurisdictions, gaining valuable exposure to global privacy operations.
This is a hands-on role focused on extending and operationalizing the Group’s GDPR-based privacy framework in APAC, starting with business-as-usual operations in Singapore and progressively expanding to Hong Kong, Australia, New Zealand, and other jurisdictions, while ensuring compliance with local privacy laws. Key responsibilities include managing third-party risk through due diligence and contract support, incident management, maintaining accurate records of processing activities, and supporting the delivery and monitoring of Data Protection Impact Assessments (DPIAs). The role also involves responding to privacy-related enquiries, advising stakeholders on regional data protection requirements, supporting data subject rights requests and breach investigations, delivering staff training, and drafting and maintaining privacy policies and governance documentation. You will also contribute to the development, implementation, and oversight of regional privacy controls, helping to embed a strong culture of data protection within the business.

Duties include, but are not limited to:

• Develop, maintain, and enhance data protection policies and procedures to foster a culture of privacy compliance across the Group.
• Support the implementation and monitoring of the Group’s privacy framework across the APAC region, ensuring compliance with local data protection laws.
• Manage third-party onboarding, including conducting privacy due diligence, reviewing contracts, and supporting negotiations.
• Coordinate the review and assessment of business processes to ensure ongoing compliance with Article 30 record-keeping obligations.
• Carry-out Data Protection Impact Assessments (DPIA), assisting with risk identification and mitigation strategies.
• Support the enhancement of Marex’s Privacy Framework to ensure clear understanding of responsibilities and rights among clients, employees, and other data subjects.
• Assist in reviewing, improving, and maintaining privacy controls to ensure effectiveness and alignment with regulatory standards.
• Support the management of data subject rights requests and privacy incident/breach response processes.
• Draft, update, and implement policies, procedures, and governance documents, tailored to local jurisdictional requirements.
• Provide day-to-day support for the Privacy Team’s business-as-usual activities.
• Independently lead and manage data privacy projects, offering expert guidance to stakeholders across the business.
• Drive the implementation and administration of the OneTrust privacy management platform.
• Conduct research on regional data protection laws and support implementation of privacy controls across jurisdictions.
• Act as a subject matter expert (SME) for APAC, building strong relationships with internal and external stakeholders.
• Understand and evaluate business processes to ensure compliance with applicable privacy requirements and remain abreast with industry developments.
• Proactively identify privacy-related issues and collaborate with the wider team to recommend and implement effective solutions for controls, policies, and contractual terms.
• The Company may require you to carry out other duties from time to tim