Privacy Analyst II in London

Help us use technology to make a big green dent in the universe! Kraken powers some of the most innovative global developments in energy. We create the technology that redefines utilities and unlocks a new energy system of the future. By optimising renewable generation, building a more intelligent grid, and empowering utilities to deliver an exceptional customer experience, our operating system is transforming the industry worldwide. It’s an incredibly exciting time to work in energy. Join us on our mission to improve the lives of ONE BILLION humans within the decade and shape a cleaner, better future for everyone.

What you’ll own:

• Handle support requests from the business, providing data protection advice.
• Collaborate with product, engineering, legal and security teams to ensure our products meet data protection regulations, best practices and client requirements.
• Engage with our developers to advocate for privacy by design and default; embed privacy requirements into engineering workflows and the SDLC.
• Conduct and support DPIAs and PIAs for products and processing activities, including risk mitigation and risk register management.
• Support client delivery teams in answering data protection processing/handling queries, RFPs and audits.
• Third-party vendor due diligence, working with InfoSec, Legal, and Procurement to assess vendor posture and manage subprocessor obligations.
• Lead on data privacy incident response, including logging, investigation, root cause analysis, remediation, and regulatory and client reporting.
• Develop and deliver training and knowledge content on global data protection.
• Create and maintain data protection policies and procedures, automating workflows where possible - including through scripting and tooling, for efficient, scalable operations.
• Maintain record of processing activities for our controller and processor obligations, including data mapping across Kraken and our subsidiaries.
• Manage the privacy mailbox, including handling rights requests.

What you’ll bring to the party:

• Proven experience in the following:
• Core requirement: Data incident management, incl. root cause analysis, remediation, logging and reporting.
• Significant operational experience in DPIAs/PIAs, third party vendor management, and risk management.
• Creating and maintaining records of processing activities.
• Working closely with technical/engineering teams, including software development and information security.
• Working knowledge of the GDPR and UK DPA 2018 and staying current with the evolving data protection landscape.
• Working in a Privacy Analyst role within an organisation that’s a data processor (e.g. a SaaS provider or software vendor).
• Implementing Privacy by Design and Privacy by Default into product development.
• Strong stakeholder management; confident engaging regularly with the business to support early and efficient risk analysis including over calls.
• Strong written and verbal communication - ability to translate complex regulatory requirements into clear, actionable guidance for technical and non-technical audiences alike.
• A self-starter, taking the initiative to help drive the team’s initiatives forward.
• Highly adaptable to new technologies, processes, and changing priorities.
• Strong problem-solving and analytical capabilities.
• Very well organised; attention to detail and documentation, and being able to meet deadlines under pressure.

Bonus points:

• Experience automating privacy processes or workflows; scripting experience or working with APIs/MCPs to automate processes.
• Candidates with a privacy engineering background, or those looking to move into privacy engineering.
• Familiarity with privacy-enhancing technologies including data masking, pseudonymisation, anonymisation, and encryption at rest and in transit.
• Experience with data discovery and classification tooling, and the ability to map data flows technically as well as through process-based exercises.
• Familiarity with the SDLC and CI/CD environments.
• Knowledge of privacy laws and local state requirements in EU, USA, APAC and the Middle East.
• Familiarity with legislation affecting our global energy and utility clients and the associated implications for Kraken.
• Understanding AI use cases within tech organisations and the associated data protection and privacy risks.

Soft Skills:

• A self-starter, taking the initiative to help drive the team’s initiatives forward.
• Highly adaptable to new technologies, processes, and changing priorities.
• Strong problem-solving and analytical capabilities.
• Very well organised; attention to detail and documentation, and being able to meet deadlines under pressure.

Are you ready for a career with us? We want to ensure you have the right tools and environment to unleash your potential. If you have any accommodation requests, please contact us at. We’ll do our best to tailor the experience to your needs so you can feel comfortable, confident and be at your best!

Studies have shown that some groups of people, like women, are less likely to apply to a role unless they meet 100% of the job requirements. At Kraken, we're creating a team of genuine, honest, empathetic people. Our people are our strongest asset and the unique skills and perspectives people bring to the team are the driving force of our success. As an equal opportunity employer, we do not discriminate on the basis of any protected attribute. We consider all applicants without regard to race, colour, religion, national origin, age, sex, gender identity or expression, sexual orientation, marital or veteran status, disability, or any other legally protected status.

Our (i) Applicant and Candidate Privacy Notice and Artificial Intelligence (AI) Notice, (ii) Website Privacy Notice and (iii) Cookie Notice govern the collection and use of your personal data in connection with your application and use of our website. These policies explain how we handle your data and outline your rights under applicable laws, including, but not limited to, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Depending on your location, you may have the right to access, correct, or delete your information, object to processing, or withdraw consent. By applying, you acknowledge that you’ve read, understood and consent to this text.

Please note that, in line with our current recruitment policy, we are unable to offer visa sponsorship for this position; applicants must have the right to work in the country that they're applying to, at the time of application.