Privacy Analyst Data Protection Office

Overview

You will navigate the most dynamic regulatory landscape, working at the intersection of established privacy laws (GDPR, UK GDPR) and emerging regulations such as the EU AI Act. This role offers the chance to tackle complex, high‑stakes compliance challenges that require deep analytical thinking and creative problem‑solving. Be a pioneer in AI Governance and shape how the company navigates the EU AI Act to ensure responsible deployment of AI technologies.

Experience & Skills

• Advising on the execution of appropriate IT security measures to safeguard personal data
• Strong knowledge of privacy documentation (e.g., DPIAs, privacy notices, contracts)
• Excellent communication skills – able to simplify complex topics for diverse audiences
• Strong leadership and interpersonal skills to influence and mentor across teams
• Experience analyzing technical processes or complex business workflows to identify privacy risks
• Ability to quickly grasp and apply global regulatory frameworks
• Experience operating in a fast‑paced environment within large, matrixed, multinational organizations

Qualifications

• A Bachelor's degree in a relevant field or equivalent professional experience
• Three or more years of experience in data privacy, compliance, or risk management
• A deep, working knowledge of the General Data Protection Regulation (GDPR) and UK GDPR
• CIPP/E certification; CIPP/US or CIPM is a plus
• Experience on cross‑border privacy projects supporting compliance in multiple geographies (e.g., EU and US)
• Direct experience conducting assessments for AI, machine learning, or automated decision‑making systems
• Preferable to have experience using OneTrust or similar privacy management software to manage DPIAs and risk registers

Location & Work Arrangement

This position is based in Dunton, and the successful candidate is expected to attend the Dunton office typically 4 days a week while remaining flexible to adjust days as required by business demands.

Pre‑employment Checks

Successful candidates will undergo a criminal record check conducted in line with the Rehabilitation of Offenders Act 1974, applied only to unspent convictions.

Equal Employment Opportunity

The Company is committed to diversity and equality of opportunity for all and opposes any form of less favourable treatment or harassment on the grounds of race, religion or belief, sex, marriage and civil partnership, pregnancy and maternity, age, sexual orientation, gender reassignment, or disability.

Responsibilities

• Lead the execution of Data Protection Impact Assessments (DPIAs) for projects in the UK and Europe, while also providing critical support to North American initiatives and the global assessment framework.
• Conduct specialized compliance reviews for artificial intelligence initiatives, identifying risks related to bias, transparency, and data minimisation.
• Serve as a primary point of contact for business teams in Dunton, providing day‑to‑day guidance on privacy‑by‑design principles and data protection requirements.
• Evaluate and negotiate the terms of data processing agreements and SCCs, supporting vendor management processes.
• Support data breach response activities when necessary.