Risk Management Associate – Data Privacy in London

Publicis Sapient’s Global Client Risk Office (GCRO) works across all disciplines and applicable geographies to identify, prevent and mitigate risks, providing visibility across the organization and empowering our people to use measured risk to make informed decisions that fuel sustainable growth in an ever‑evolving business landscape.

The Risk Management Analyst – Data Privacy role is an entry‑level support role that assists with the execution and day‑to‑day administration of the company’s global data privacy program. Working under the direction of the Global Data Privacy Program Lead and in partnership with Publicis Groupe’s Global Data Privacy Office (GDPO), this role helps coordinate and execute program activities, track deliverables, maintain documentation, support stakeholder follow‑up, and contribute to the identification, mitigation, and reporting of data privacy risks across regions, markets, and business processes.

Your Impact:

• Support the implementation and management of the global data privacy program alongside the Global Data Privacy Program Lead, helping to ensure program activities are executed consistently across relevant regions, markets, and internal teams.
• Support the development and implementation of strategies designed to minimize the risk of non‑compliance with applicable privacy regulations, including CCPA, PIPEDA, GDPR, and other relevant privacy laws.
• Partner with GDPO to operationalize legal/regulatory guidance across brand activities and processes.
• Support GCRO’s approach to identifying and assessing privacy risks as early as the RFP, MSA signing, and start‑work stages of the engagement lifecycle.
• Undertake reviews of business processes to confirm best practices are followed regarding the handling, use, storage, retention, and protection of personal data.
• Build working relationships with appropriate client‑facing, internal, legal, security, and other business stakeholders.
• Provide first‑level support to stakeholders regarding data privacy and protection policies, procedures, and program expectations; monitoring compliance and escalating complex matters as appropriate.
• Assist with special and cross‑functional projects related to privacy, risk management, compliance, data governance, process improvement, and operational efficiency.

Program Execution and Reporting:

• Under the supervision of the Global Data Privacy Program Lead, support core data privacy program activities within the assigned region or market, including issuing Data Inventory questionnaires to relevant contacts, ensuring completion, and performing quality checks on responses received.
• Facilitate factual due diligence activities for data privacy impact assessments, including gathering information, coordinating inputs, documenting findings, and tracking follow‑up actions.
• Conduct research on relevant topics, trends, regulations, industry practices, and internal priorities to enhance privacy knowledge and support informed decision‑making.
• Perform content development activities to support business initiatives, communications, training, and knowledge‑sharing efforts.
• Host, coordinate and support training and awareness activities designed to strengthen privacy knowledge, accountability, and program adoption.
• Track and report on key metrics to monitor program status, progress, risks, blockers, and completion rates, including providing periodic updates on data privacy deliverables, open items, risks, and program progress for review by program leadership.
• Complete assigned tasks and responsibilities within designated timelines through effective use of internal status meetings, follow‑up mechanisms, personal time management, and prioritization skills.

Stakeholder Support:

• Support client teams to ensure questions related to data privacy and/or data protection are answered in a timely, accurate, and business‑oriented manner.
• Support ad‑hoc business requests related to data privacy, including client questionnaires and audits.
• Act as a day‑to‑day contact for track‑related communications, ensuring timely responses, follow‑through, and escalation where needed.
• Help promote consistent understanding and application of data privacy obligations across delivery teams, internal functions, and business process owners.

Qualifications:

• 1‑3 years of work experience in risk management, privacy, legal, compliance, project management, audit, or a related field.
• Foundational understanding of data privacy, information security, risk management, regulatory compliance, or business process governance preferred.
• Exposure to privacy regulations such as GDPR, CCPA, PIPEDA, or similar privacy laws is preferred.
• Experience or demonstrated ability to support projects, track deliverables, coordinate stakeholders, prepare status updates, and manage follow‑ups across multiple workstreams.
• Strong project management, follow‑through, prioritization, and organizational skills.
• Strong attention to detail, analytical and critical thinking, and ability to identify when matters require escalation.
• Ability to translate complex information into practical, business‑friendly guidance.
• Comfortable working in a fast‑paced environment with multiple priorities, evolving requirements, and time‑sensitive deliverables.
• Demonstrated ability to work independently in ambiguous or unstructured environments, using sound judgment to define priorities, gather relevant information, develop recommendations, and move work forward with limited direction.
• Curiosity, accountability, and willingness to learn. Being a self‑starter and taking initiative.
• Collaborative mindset with strong interpersonal and communication skills.
• Demonstrated aptitude to quickly and effectively adapt to technologies and tools outside of current experience.

Education: Bachelor's Degree required.

As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, age, disability, sexual orientation, gender identity, or religion. Publicis Sapient UK is a disability confident employer and is dedicated to fostering an inclusive and accessible work environment. We encourage individuals with disabilities and long‑term conditions to apply for this position and we will provide adjustments where possible throughout the recruitment process.