Data Protection Analyst

This role supports the day-to-day operation of the Office of the Data Protection Officer (DPO), ensuring the effective management of privacy-related activities across the organisation. The position plays a key role in overseeing privacy complaints, managing the end-to-end process for rights requests and incident management, and providing advice and guidance on a wide range of privacy matters.

Working with both internal and external stakeholders, you will be responsible for driving process improvements, developing reports and dashboards, supporting compliance assessments and privacy-by-design initiatives, and enhancing the DPO Office’s online presence. The role also contributes to the organisation’s digital transformation journey, helping to evolve and strengthen privacy services, processes, and stakeholder engagement.

• Coordinate and manage core DPO activities, including compliance reviews, reporting, stakeholder communications, and the scheduling of regular privacy-related activities.
• Support the complaints process, ensuring timely investigation, stakeholder engagement, record-keeping, reporting, dashboard creation, and professional resolution within agreed timescales.
• Operate, maintain, and continuously improve the rights requests process, ensuring compliance with statutory deadlines, monitoring performance, and engaging effectively with internal and external stakeholders.
• Provide privacy advice and guidance to stakeholders, supporting privacy-by-design principles, data protection assessments, compliance activities, and the timely completion of privacy-related requirements.
• Maintain and enhance the Office of the DPO's digital presence and knowledge resources, including the management of online content, self-service tools, training materials, and the team inbox.
• Support privacy incident and third-party risk management, including investigations, fact-finding, reporting, mitigation activities, lessons learned, and oversight of personal data processing by suppliers and partners.
• Produce and analyse privacy management information, including KPIs, dashboards, reports, and trend analyses, identifying opportunities for process improvement and enhancing the effectiveness of the privacy function.

• Knowledge of data protection legislation, including UK GDPR, PECR, the Data (Use and Access) Act (DUAA), and related privacy regulations.
• Experience of working in a fast-paced environment, managing competing priorities, ad hoc requests, and fixed deadlines.
• Strong stakeholder management skills, with the ability to build and maintain positive relationships across a range of internal and external stakeholders.
• Proven ability to work collaboratively as part of a team while managing responsibilities independently.

Ideally, you'll also have:

• Degree-level qualification, apprenticeship, or equivalent relevant work experience.
• Professional privacy qualifications such as CIPP/E, CIPM, or equivalent certifications.
• Experience of using Microsoft 365 applications, including SharePoint, Excel, and Office 365 eDiscovery, as well as Adobe Acrobat Pro.
• Experience of web content management or webpage design.
• Experience of service design, implementation, monitoring, and continuous improvement.

#LI-Hybrid