About the role

The Data Protection Analyst will support the organization's data protection framework by ensuring compliance with UK legislation and managing data subject rights requests. They will also provide day-to-day privacy advice, conduct risk assessments, and assist in the management of personal data breaches and audits.

What they look for

Data protection Information security UK GDPR Data Protection Act 2018 DSAR coordination DPIA PIA LIA Compliance monitoring Risk management Third-party due diligence Reporting Microsoft Office Stakeholder management Privacy by design

Requirements

Candidates should have experience in data protection, privacy, or compliance roles with a strong understanding of UK GDPR and the Data Protection Act 2018. Proficiency in Microsoft Office and the ability to build effective relationships across the organization are essential for this role.

Benefits

Free gym membership Health assessments Retail discounts Pension options

Full description

Data Protection Analyst Barbican, London | Hybrid Working | Information Security & Data Protection | Permanent | Full-Time

Competitive salary available, depending on experience 37.5 hours per week

An exciting opportunity has arisen within the Information Security & Data Protection team, who are looking for someone to join them as a Data Protection Analyst.

Working closely with the Data Protection Lead, Information Security colleagues and stakeholders across the business, the successful candidate will play a key role in supporting the organisation's data protection framework, ensuring compliance with data protection legislation and embedding privacy best practice across the organisation.

The successful individual will hold the following responsibilities:

Support the delivery and continuous improvement of Nuffield Health's Data Protection Framework, including maintaining data protection records, documentation and accountability evidence, ensuring compliance with UK data protection legislation and organisational policies.

Coordinate and manage Data Subject Rights Requests, including DSARs, rectification, erasure, restriction, portability and objection requests, ensuring statutory deadlines are met and accurate records are maintained. Support the ongoing development and improvement of related processes and controls.

Provide practical day-to-day data protection advice and guidance to colleagues, supporting projects, operational teams and business change initiatives while promoting privacy by design.

Support the completion of DPIAs, PIAs, LIAs and reviews of high-risk processing activities, ensuring privacy risks are appropriately identified, assessed and managed.

Assist in the management of personal data breaches, compliance monitoring activities, audits and assurance reviews, including maintaining risk registers, incident records and improvement plans.

Support third-party privacy due diligence activities, including reviews of Data Processing Agreements, data sharing arrangements, processors and international data transfers.

Produce reports, metrics, dashboards and management information, analysing trends and identifying opportunities to improve compliance, efficiency and data protection performance.

Support the development of training, awareness materials, guidance documents and self-service tools, acting as a privacy champion and helping to embed a culture of accountability and transparency across the organisation.

The role holder will be expected to perform any other duties that may reasonably be asked of them.

The role holder will need to build and maintain effective relationships at all levels across the organisation.

Skills, Qualifications and Experience:

Experience working within a Data Protection, Privacy, Compliance, Information Governance or Risk role.

Good understanding of UK GDPR, the Data Protection Act 2018 and associated privacy requirements.

Experience supporting and/or coordinating Data Subject Access Requests (DSARs) and other data subject rights requests.

Experience supporting DPIAs, PIAs, LIAs or similar privacy assessments.

Experience supporting supplier, third-party or data sharing reviews would be advantageous.

Knowledge of personal data breach management and incident response processes.

Experience maintaining records, registers, audit trails and compliance documentation.

Strong organisational skills with the ability to manage multiple priorities and deadlines effectively.

Excellent attention to detail and analytical skills.

Strong written and verbal communication skills, with the ability to explain data protection requirements clearly to a range of stakeholders.

Confident IT user with strong skills in Microsoft Office applications, particularly Outlook, Word and Excel.

Ability to build effective working relationships and influence stakeholders across different teams.

Experience producing reports, dashboards, metrics or management information would be advantageous.

Professional data protection qualifications such as IAPP, BCS Practitioner Certificate in Data Protection or equivalent would be desirable.

Helping you feel good.

We want you to love coming to work, feeling healthy, happy and valued. That’s why we’ve developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.

At Nuffield Health, we take care of what’s important to you.

If you like what you see, why not start your application now? We consider applications as we receive them and reserve the right to close adverts early (for example, where we have received an unprecedented high volume of applications). So, it’s a good idea to apply right away to ensure you’re considered for this role.

Apply today… It starts with you.

#CentralSupport