Data Protection Analyst

This role supports the day to day operation of the Office of the Data Protection Officer (DPO), ensuring the effective management of privacy related activities across the organisation. The position plays a key role in overseeing privacy complaints, managing the end to end process for rights requests and incident management, and providing advice and guidance on a wide range of privacy matters.

Working with both internal and external stakeholders, you will be responsible for driving process improvements, developing reports and dashboards, supporting compliance assessments and privacy by design initiatives, and enhancing the DPO Office's online presence. The role also contributes to the organisation's digital transformation journey, helping to evolve and strengthen privacy services, processes, and stakeholder engagement.

• Coordinate and manage core DPO activities, including compliance reviews, reporting, stakeholder communications, and the scheduling of regular privacy related activities.
• Support the complaints process, ensuring timely investigation, stakeholder engagement, record keeping, reporting, dashboard creation, and professional resolution within agreed timescales.
• Operate, maintain, and continuously improve the rights requests process, ensuring compliance with statutory deadlines, monitoring performance, and engaging effectively with internal and external stakeholders.
• Provide privacy advice and guidance to stakeholders, supporting privacy by design principles, data protection assessments, compliance activities, and the timely completion of privacy related requirements.
• Maintain and enhance the Office of the DPO's digital presence and knowledge resources, including the management of online content, self service tools, training materials, and the team inbox.
• Support privacy incident and third party risk management, including investigations, fact finding, reporting, mitigation activities, lessons learned, and oversight of personal data processing by suppliers and partners.
• Produce and analyse privacy management information, including KPIs, dashboards, reports, and trend analyses, identifying opportunities for process improvement and enhancing the effectiveness of the privacy function.

• Knowledge of data protection legislation, including UK GDPR, PECR, the Data (Use and Access) Act (DUAA), and related privacy regulations.
• Experience of working in a fast paced environment, managing competing priorities, ad hoc requests, and fixed deadlines.
• Strong stakeholder management skills, with the ability to build and maintain positive relationships across a range of internal and external stakeholders.
• Proven ability to work collaboratively as part of a team while managing responsibilities independently.

Ideally, you'll also have:

• Degree level qualification, apprenticeship, or equivalent relevant work experience.
• Professional privacy qualifications such as CIPP/E, CIPM, or equivalent certifications.
• Experience of using Microsoft 365 applications, including SharePoint, Excel, and Office 365 eDiscovery, as well as Adobe Acrobat Pro.
• Experience of web content management or webpage design.
• Experience of service design, implementation, monitoring, and continuous improvement.