We’re Capital on Tap 👋
💳 Capital on Tap was founded with the mission to help small business owners and make their lives easier. Today, we provide an all-in-one business credit card & spend management platform that helps business owners save time and money. Capital on Tap proudly serves over 200,000 businesses across the world and our goal is to help 1 million small businesses by 2030.
Why Join Us?
We empower you to be innovative and solve complex problems. Take ownership, make an impact, and thrive in our scaling and agile environment.
🏡🏢This is a Hybrid role, the Data Protection team work from our Cardiff Office 3 days per week.
The Data Protection Team at Capital on Tap
The data protection team sits within Cybersecurity and is made up of a Data Protection Manager reporting to the DPO.
The Role
We are looking for a Data Protection Analyst who will be responsible for supporting the development, implementation, and management of the company's data protection and privacy policies, ensuring compliance with relevant laws and regulations (such as GDPR, CCPA or equivalent frameworks).
This role will assist in safeguarding sensitive data, performing risk assessments, and providing expert guidance on data protection practices to ensure data security across all organisational operations.
This role involves overseeing data protection procedures, ensuring secure handling of personal data, and assisting in privacy-related advice, projects and audits.
You will be the first point of contact for the operational side of the business, promoting a culture of data protection and compliance within the organisation. The ideal candidate will have strong organisational skills, attention to detail, and a comprehensive understanding of data protection principles.
What You’ll Be Doing
- Ensure compliance with applicable data protection laws, including GDPR, PECR, CCPA, The California Privacy Rights Act (CPRA) and other regional regulations
- Support the Data Protection Officer (DPO) and Data Protection Manager (DPM) in monitoring compliance across departments.
- Management of the data rights process, including DSAR’s and erasure requests
- Maintain and update records of processing activities (RoPA) and ensure it remains accurate and up to date
- Support due diligence processes for vendors and third parties, ensuring compliance with data protection standards
- Coordinate data protection training sessions and ensure all employees understand their responsibilities.
- Act as a point of contact for employees with queries regarding data protection practices.
We’re Looking For 🔎
Required skills/attributes:
- Excellent understanding of the GDPR/ Data Protection Act (2018)
- Experience with processing data protection rights (like SAR’s, Right to erase)
- Financial services regulation knowledge
- Proactive stakeholder management skills
- Strong reporting skills
- High level of integrity and commitment to confidentiality.
- Proactive and able to work independently or as part of a team.
- Eagerness to learn and adapt to evolving data protection requirements.
- Strong organisational skills, and the ability to effectively prioritise key activities.
Nice to have skills/qualifications:
- Any privacy qualification such as CIPP/E, CIPM, CIPP/US, BCS Foundation Certificate in Data Protection
- Experience working with the CCPA (California Consumer Privacy Act)
- Experience working with European data protection regulations
Diversity & Inclusion 🌈
We welcome, consider and encourage applications from anyone who shares our commitment to inclusivity. Join us in creating a space where authenticity thrives, and everyone can do their best work.
Great Work Deserves Great Perks
We try not to take ourselves too seriously (all the time) so we make sure our office is decked out with a pool table, arcade machine, beer tap, and a couple of office dogs thrown in for good measure. Check out our benefits:
🏥 Private Healthcare including dental and opticians services through Vitality
✈️ Worldwide travel insurance through Vitality
🎁 Anniversary Rewards (£250, £500, £750, 4-week fully paid sabbatical)
👛 Salary Sacrifice Pension Scheme up to 7% match
🏖️ 28 days holiday (plus bank holidays)
📖 Annual Learning and Wellbeing Budget
👪 Enhanced Parental Leave
🚲 Cycle to Work Scheme
🚂 Season Ticket Loan
💬 6 free therapy sessions per year
🐶 Dog Friendly Offices
🍫 Free drinks and snacks in our offices
Check out more of our benefits, values and mission here.
Interview Process 🤝
🤝First stage: 30 minute intro and values call with Talent Partner (Video call)
🤝Final stage: 60 minute technical/ CV overview interview with the Data Protection Manager and Cybersecurity & Infrastructure Director (Video call/In Person)
Other Info
👍Check out our ‘Top Tips’ for interviewing.
✔️Keep updated on new job opportunities by following us on Linkedin.
📧Email [email protected] if you have any questions.
Excited to work here? Apply!
If you’d like to progress your career within our fast growing, profitable fintech then click apply and we will aim to get back to you within 3 working days (during busy periods this could take up to 5 working days.)
Top Skills
What We Do
Capital on Tap makes it easy for small businesses to manage their business spending, access funding, and earn best-in-class rewards. More than 200,000 small businesses have spent $5 billion on their Capital on Tap Business Credit Cards across the US and UK. The Capital on Tap Business Credit Card is issued by WebBank.