Data Privacy Analyst

Data Privacy Analyst

London, Hybrid

A spot has become available on a high performing team in an International Law Firm for a Data Privacy Analyst. This role sits within a global Risk, Compliance and Privacy function and offers the chance to work on a broad range of privacy, governance, and regulatory matters across multiple jurisdictions.

This position is ideal for a privacy professional looking to further develop their expertise while partnering with stakeholders across legal, procurement, IT, HR, and business operations teams.

Key Responsibilities

• Conduct privacy risk assessments and Data Protection Impact Assessments (DPIAs).
• Review, negotiate, and advise on data processing agreements and privacy clauses within client and supplier contracts.
• Respond to client information security and privacy questionnaires.
• Support the ongoing delivery of the organisation's privacy management framework.
• Maintain privacy registers, policies, and governance documentation.
• Monitor compliance with UK GDPR and wider global privacy regulations.
• Support internal audits, certification activities, and compliance reviews.
• Assist with data subject rights requests and privacy incident management.
• Deliver privacy guidance, training, and awareness initiatives across the business.
• Provide practical privacy advice to stakeholders and support privacy-by-design initiatives. Based on responsibilities outlined in

About You

• Previous experience in a Privacy, Data Protection, Risk, Compliance, Governance, or Legal role.
• Experience conducting DPIAs (Data Protection Impact Assessments) and/or demonstrable experience reviewing, drafting, or advising on Data Processing Agreements (DPAs) is essential.
• Strong understanding of UK GDPR and broader data protection principles.
• Ability to identify, assess, and communicate privacy risks effectively.
• Strong stakeholder management and relationship-building skills.
• Curious about AI, emerging technologies, and their privacy implications.
• Professional services experience is advantageous but not essential.
• CIPP/E or similar privacy qualification would be beneficial. Based on the qualifications and experience requirements in

What's on Offer

• Exposure to complex, international privacy matters.
• Significant stakeholder engagement across the business.
• Career development within an established Risk & Compliance function.
• Flexible hybrid working.
• Competitive salary and benefits package.

If you're looking to build your career in privacy, risk, and data protection within a collaborative and forward-thinking environment, we'd love to hear from you.

Apply now via the link, or send your CV through to Zali Oulton at [email protected]