Data Privacy Analyst

Marcus Donald are currently looking to identify an experienced Data Privacy Analyst to join an established IT team within an Educational Organisation services provider in the City of London.

9 Months Fixed Term Contract up to £30,000 Pro Rata.

In this role you will work within a team that will deliver a practical data privacy compliance service to the organisation. This will include daily tasks such as preparing data in relation to subject access requests, responding according to policy on data breach notifications and responding to routine queries and requests. You will work closely and under the guidance of the data privacy lead and legal department. Outside these routine tasks, you will contribute to cross-organisation activities with the goal of continuously improving data privacy and GDPR compliance across everything we do.

Data Privacy Analyst - Skills and Abilities required:

• Working knowledge of data privacy legislation including the GDPR and DPA 2018
• Substantial experience in a role involving large scale data management/processing.
  • Support the business to align business practice and processes with our data privacy policies, standards and guidelines and assisting them to comply with GDPR and other relevant legislation whilst aligning with relevant PIM standards such as ISO27701.
  • Work with business asset owners to ensure they maintain comprehensive data processing (article 30), data retention schedules and data privacy risk registers as part of their business activities.
  • Work in conjunction with change management colleagues to carry out the necessary data privacy risk assessments and DPIA in accordance with a defined risk methodology and company policy.
  • Support the business in the maintaining and monitoring appropriate data asset registers and information flows.
  • Support the business in carrying out ongoing data privacy incident handling testing and improvements.
  • Support the data privacy lead in the ongoing review and improvement of policy and practice in relation to data privacy.
  • Provide advice and guidance on data privacy matters (within level of expertise).
  • Collating data that will feed scheduled reporting on the efficiency and effectiveness of data privacy compliance activities and areas of non-compliance.
  • Take part in carrying out internal audits to assure ongoing data privacy compliance.

Data Privacy Analyst - Desirable:

• Solid data privacy experience ideally gained in a legal or compliance team.
• Evidence of contribution to continuous business process improvement
• Direct experience in business change projects

Data Privacy Analyst - Duties and Responsibilities:

• Monitoring the GDPR email & telephone contacts and responding appropriately and in a timely manner to notifications of data subject access requests, data breach notifications and general DP requests.
• Responding to data subject access requests according to policy by carrying out the necessary legitimacy checks, liaising across the business to collate relevant data, liaising with legal on necessary redactions, responding, recoding, and monitoring outcomes.
• Responding to data breach reports according to policy by co-ordinating the gathering of necessary information and liaising with the legal department to carry out an assessment and follow on, including reporting and communications, as necessary.
• Responding to routine data privacy requests such as supplier compliance questionnaires appropriately using a combination of pre-defined responses, policy, personal judgement, and liaison with legal and data privacy colleagues as required.
• Recording all activities and reporting on performance.
• Establishing cross-organisational relationships to carry out the role efficiently.
• Working with colleagues to identify potential improvements and efficiencies.
• Identifying risks and escalating issues and problems as required.

If this position is of interest, please do not hesitate to contact Lola Reynolds for any questions that may need answering and/or further information regarding the company and role.