Privacy Analyst

Who you are

• Core requirement:
• Data incident management, incl. root cause analysis, remediation, logging and reporting
• Significant operational experience in DPIAs/PIAs, third party vendor management, and risk management
• Creating and maintaining records of processing activities
• Working closely with technical/engineering teams, including software development and information security
• Working knowledge of the GDPR and UK DPA 2018 and staying current with the evolving data protection landscape
• Working in a Privacy Analyst role within an organisation that’s a data processor (e.g. a SaaS provider or software vendor)
• Implementing Privacy by Design and Privacy by Default into product development
• Strong stakeholder management; confident engaging regularly with the business to support early and efficient risk analysis including over calls
• Strong written and verbal communication - ability to translate complex regulatory requirements into clear, actionable guidance for technical and non-technical audiences alike
• A self-starter, taking the initiative to help drive the team’s initiatives forward
• Highly adaptable to new technologies, processes, and changing priorities
• Strong problem-solving and analytical capabilities
• Very well organised; attention to detail and documentation, and being able to meet deadlines under pressure
• Experience automating privacy processes or workflows; scripting experience or working with APIs/MCPs to automate processes. Candidates with a privacy engineering background, or those looking to move into privacy engineering, are encouraged to apply
• Familiarity with privacy-enhancing technologies including data masking, pseudonymisation, anonymisation, and encryption at rest and in transit
• Experience with data discovery and classification tooling, and the ability to map data flows technically as well as through process-based exercises
• Familiarity with the SDLC and CI/CD environments
• Knowledge of privacy laws and local state requirements in EU, USA, APAC and the Middle East
• Familiarity with legislation affecting our global energy and utility clients and the associated implications for Kraken
• Understanding AI use cases within tech organisations and the associated data protection and privacy risks
• Studies have shown that some groups of people, like women, are less likely to apply to a role unless they meet 100% of the job requirements. Whoever you are, if you like one of our jobs, we encourage you to apply as you might just be the candidate we’re looking for!

What the job involves

• Handle support requests from the business, providing data protection advice
• Collaborate with product, engineering, legal and security teams to ensure our products meet data protection regulations, best practices and client requirements
• Engage with our developers to advocate for privacy by design and default; embed privacy requirements into engineering workflows and the SDLC
• Conduct and support DPIAs and PIAs for products and processing activities, including risk mitigation and risk register management
• Supporting client delivery teams in answering data protection processing/handling queries, RFPs and audits
• Third-party vendor due diligence, working with InfoSec, Legal, and Procurement to assess vendor posture and manage subprocessor obligations
• Lead on data privacy incident response, including logging, investigation, root cause analysis, remediation, and regulatory and client reporting
• Develop and deliver training and knowledge content on global data protection
• Create and maintain data protection policies and procedures, automating workflows where possible - including through scripting and tooling, for efficient, scalable operations
• Maintaining record of processing activities for our controller and processor obligations, including data mapping across Kraken and our subsidiaries
• Managing the privacy mailbox, including handling rights requests

Benefits

• Equity option scheme: Everyone who works at Kraken owns a part of the business with shares in the Octopus Energy Group. So as the company grows we all benefit
• Pension scheme: We'll pay 5%. You decide on your contribution starting from 3%
• Holidays: We don't count your holiday days. We trust everyone to work hard and take as much time off as they need
• Flexible working: We're happy for you to work in a way that's best for you. Need to pick the kids up from school or work from home? That's not a problem. It's important to us that everyone has a positive work-life balance
• Free breakfast: Our offices are always stocked with fresh fruit, breakfast, snacks, great coffee and soft drinks.

Weekly on a Friday we all get together (including virtually) for company updates and drinks

• For parents: We can arrange access to tax free childcare, as well as maternity and paternity pay
• Free eye tests: We offer eye test vouchers for all colleagues who use Visual Display Units (VDU). Long spells of VDU work can be visually demanding so we want to make sure you're OK
• Car salary sacrifice: Save money on leasing an electric vehicle through our workplace salary sacrifice scheme
• Cycle to work scheme: Spread the cost of buying a bike, including accessories and safety equipment, up to a value of £2.5K. And save money on the repayments through the cycle to work scheme
• Get the right tech: Have a certain tech requirement? We’ll do our best to sort it for you
• Money coach: Get support with financial planning through our partnership with Octopus Money Coach
• Yoga + Headspace: Twice a week we have 45 Minute live yoga class open to all Kraken staff.

Need some calm in your life? We have Headspace licences available

• Team events and activities: Participate in team events and cohesion activities to build stronger connections
• Health Insurance: We’ll provide comprehensive coverage with Alan and access to Alan Mind.
• Transportation: If you cycle to the office we’ll support you by up to €600/year, if you use public transport we'll reimburse 75% of your Navigo pass. If you use both, we'll support you by up to €900/year
• Green energy discount: Enjoy a 32% discount on green energy compared to the regulated tariff
• Year-end gift voucher: Receive a €100 gift voucher at the end of each year
• Gymlib subscription: Get a subscription to Gymlib for access to a wide variety of fitness options
• Meal vouchers: Enjoy €10 Ticket Restaurant cards for meal expenses
• NGO support days: Benefit from three additional RTT days (Reduction of Working Time) to support NGO work, every year