What are the responsibilities and job description for the Legal Assistant position at ACE Money Transfer?
About Us:
ACE Money Transfer is a UK-based multinational company headquartered in Manchester, United Kingdom. ACE Money Transfer provides online remittance services to individuals in 29 countries across the UK, Europe, Canada, and Australia, enabling them to send money across borders in over 100 countries
About the role:
The Legal Assistant provides day-to-day operational support to the Data Privacy Expert and Manager, CGLA, assisting with the administration and coordination of data protection compliance activity across the ACE Money Transfer Group's nine operating jurisdictions. The role is support-facing rather than decision-making: it exists to keep the Group's data protection records, contracts, requests, and filings organised, current, and audit-ready, so that substantive legal analysis and regulatory judgement remain with the Data Privacy Expert and Manager, CGLA. The role reports jointly to the Data Privacy Expert and the Manager, CGLA.
Core responsibilities include:
The role calls for working familiarity with UK GDPR, EU GDPR, and the general principles of international data protection frameworks, an understanding of controller/processor distinctions and cross-border transfer mechanisms sufficient to flag issues accurately (rather than resolve them independently), comfort working within a CLM platform or equivalent legal technology tool, strong organisational and documentation skills, and excellent written and spoken English.
Performance in this role is assessed against the Group's KPI Framework for the Legal Assistant role, reviewed annually and reported to the Data Privacy Expert and Manager, CGLA.
ACE Money Transfer is a UK-based multinational company headquartered in Manchester, United Kingdom. ACE Money Transfer provides online remittance services to individuals in 29 countries across the UK, Europe, Canada, and Australia, enabling them to send money across borders in over 100 countries
About the role:
The Legal Assistant provides day-to-day operational support to the Data Privacy Expert and Manager, CGLA, assisting with the administration and coordination of data protection compliance activity across the ACE Money Transfer Group's nine operating jurisdictions. The role is support-facing rather than decision-making: it exists to keep the Group's data protection records, contracts, requests, and filings organised, current, and audit-ready, so that substantive legal analysis and regulatory judgement remain with the Data Privacy Expert and Manager, CGLA. The role reports jointly to the Data Privacy Expert and the Manager, CGLA.
Core responsibilities include:
- Supporting the intake, tracking, and administration of Data Processing Agreements (DPAs), SCCs, NDAs, and other data-protection-related contracts, using approved templates and clauses maintained by the Data Privacy Expert, and flagging any novel issues or cross-border transfer questions upward rather than resolving them independently
- Completing first-line data protection questionnaires and due-diligence checklists on vendors, partners, and sub-processors, and passing findings to the Data Privacy Expert for assessment and sign-off
- Maintaining data protection contracts within the CLM platform — intake, tracking, renewal alerts, and archiving of executed copies — and keeping the DP contract template library organised
- Acting as first point of logging for data subject rights requests (DSARs) — recording each request, tracking statutory timelines, and coordinating with relevant teams to gather information — while escalating any complex, contentious, or high-risk requests to the Data Privacy Expert
- Maintaining the Group DSAR and breach registers, and preparing basic volume/timeline metrics for the Data Privacy Expert's reporting to the Manager, CGLA and ExCo
- Logging reported data breach incidents, completing initial factual intake, and escalating promptly to the Data Privacy Expert for assessment and any regulatory notification decision
- Assisting the Data Privacy Expert in keeping the Group's Records of Processing Activities (RoPAs), data flow maps, and data inventory documentation up to date across entities and jurisdictions, as directed
- Tracking supervisory authority registrations and renewal dates across applicable jurisdictions and flagging upcoming deadlines to ensure timely action
- Compiling documentation and records requested for internal audits, regulatory inspections, and governance reviews, under the direction of the Data Privacy Expert and Manager, CGLA
- Supporting the preparation of internal data protection training materials and awareness communications, and maintaining the Group's DP policy register (status, review cycles, ownership, approvals)
- Providing general administrative and coordination support to the Data Privacy Expert and Manager, CGLA, including preparing presentations, reports, and compliance dashboards
The role calls for working familiarity with UK GDPR, EU GDPR, and the general principles of international data protection frameworks, an understanding of controller/processor distinctions and cross-border transfer mechanisms sufficient to flag issues accurately (rather than resolve them independently), comfort working within a CLM platform or equivalent legal technology tool, strong organisational and documentation skills, and excellent written and spoken English.
Performance in this role is assessed against the Group's KPI Framework for the Legal Assistant role, reviewed annually and reported to the Data Privacy Expert and Manager, CGLA.
Qualifications
- Essential: Law degree (LLB or equivalent); qualified or part-qualified solicitor/lawyer, or an equivalent legal qualification recognised in the relevant jurisdiction.
- Desirable: A recognised data protection certification (e.g. CIPP/E, CIPM, or BCS Practitioner Certificate in Data Protection) or evidence of active progress toward one.
Knowledge & Technical Skills
- Working knowledge of UK GDPR, EU GDPR and the general principles underpinning international data protection frameworks (e.g. PIPEDA, and equivalent regimes in the Group's operating jurisdictions).
- Understanding of controller/processor distinctions, cross-border transfer mechanisms (SCCs, adequacy decisions, Article 49 derogations) and core data protection principles (purpose limitation, data minimisation, retention).
- Comfortable working with Contract Lifecycle Management (CLM) platforms or equivalent legal technology tools.
- Strong legal drafting skills and excellent written and spoken English.
ACE Money Transfer profile: https://acemoneytransfer.com/company-profile