Senior Analyst in Bristol

hackajob is collaborating with Verisk to connect them with exceptional professionals for this role. At Verisk, data and analytics power better decisions for businesses around the world. As a trusted global provider of data-driven insights, technology solutions, and risk intelligence, we operate in highly regulated environments where responsible data management and privacy are critical to our success.

We are seeking a Senior Privacy Analyst to join our growing UK/EMEA Privacy team. This is an exciting opportunity for a privacy professional who wants to have a key operational role in supporting and enhancing a mature privacy programme across multiple jurisdictions, business functions, and technology platforms. Reporting into the EMEA Privacy Lead and working closely with stakeholders across Legal, Compliance, Information Security, Procurement, HR, Product Development, Marketing, Operations, and senior leadership teams, you will help ensure privacy requirements are embedded into day-to-day business activities and strategic initiatives. This is a non‐legal role and does not involve providing any legal advice for or to the organization.

This hands-on role will support the continued development, operation, and enhancement of Verisk's privacy programme across the UK and EMEA. You will help operationalise privacy requirements, maintain key privacy documentation and workflows, coordinate privacy assessments, support data subject rights processes, and contribute to privacy-by-design initiatives across the organisation. The successful candidate will combine strong knowledge of UK and EU data protection requirements with excellent organisational skills, sound judgement, and the ability to work collaboratively with both technical and non-technical stakeholders. This position is London-based (hybrid) and offers the opportunity to work closely with colleagues across EMEA and within Verisk's global privacy network.

Responsibilities

• Support the day-to-day operation of Verisk's UK/EMEA privacy programme.
• Assist business teams in maintaining Records of Processing Activities (ROPAs) and other compliance documentation.
• Support the development and maintenance of privacy policies, standards, procedures, templates, playbooks, and governance documentation.
• Coordinate and support Data Privacy Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).
• Work with stakeholders to identify, assess, and mitigate privacy risks across products, systems, vendors, business processes, and data initiatives.
• Manage and coordinate Data Subject Access Requests (DSARs), including intake, investigation, tracking, documentation, and stakeholder engagement.
• Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities.
• Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination.
• Monitor developments in privacy, emerging regulatory areas (including AI where relevant), ePrivacy, and related regulatory frameworks.
• Support privacy training, awareness campaigns, and communications across the organisation.
• Maintain privacy metrics, dashboards, trackers, and reporting for management and governance forums.
• Provide guidance and support on privacy-related enquiries and assist with audits, due diligence requests, and compliance reviews.

Qualifications

• A recognised privacy qualification such as CIPP/E, CIPM, CIPT, or equivalent.
• A minimum of 3 – 5 years' experience in privacy, data protection, compliance, or privacy operations.
• Strong working knowledge of UK GDPR, EU GDPR, the UK Data Protection Act 2018, ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks.
• Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation.
• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.
• Excellent written and verbal communication skills.
• Strong attention to detail and organisational capability.
• The ability to manage competing priorities and work independently within a fast-paced environment.
• A pragmatic, risk-based approach and collaborative mindset.
• Experience with privacy management platforms and familiarity with productivity tools such as Copilot, Claude, or ChatGPT would be advantageous.
• Additional European language skills are desirable.