Data Privacy Analyst

Taylor Root; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Competitive salary

Job summary

Taylor Root, a leading international law firm, is seeking a Data Privacy Analyst to join the global Risk, Compliance and Privacy function. You will help manage privacy, governance and regulatory matters across multiple jurisdictions and collaborate with legal, procurement, IT, HR and business operations teams.

Key duties include DPIAs, DPAs review and negotiation, handling client questionnaires, maintaining privacy registers and governance documents, monitoring UK GDPR compliance, supporting

Qualifications

• Experience in Privacy, Data Protection, Risk, Compliance, Governance or Legal roles.
• Experience conducting DPIAs and/or reviewing/Advising on DPAs is essential.
• Strong understanding of UK GDPR and data protection principles.

Responsibilities

• Conduct privacy risk assessments and DPIAs across projects.
• Review, negotiate and advise on DPAs and privacy clauses in contracts.
• Respond to client information security and privacy questionnaires.

Skills

Privacy

Data Protection

DPIA

DPAs

UK GDPR

Stakeholder management

AI awareness

Education

CIPP/E

Job description

A spot has become available on a high performing team in an International Law Firm for a Data Privacy Analyst. This role sits within a global Risk, Compliance and Privacy function and offers the chance to work on a broad range of privacy, governance, and regulatory matters across multiple jurisdictions.

This position is ideal for a privacy professional looking to further develop their expertise while partnering with stakeholders across legal, procurement, IT, HR, and business operations teams.

Key Responsibilities

• Conduct privacy risk assessments and Data Protection Impact Assessments (DPIAs).
• Review, negotiate, and advise on data processing agreements and privacy clauses within client and supplier contracts.
• Respond to client information security and privacy questionnaires.
• Support the ongoing delivery of the organisation's privacy management framework.
• Maintain privacy registers, policies, and governance documentation.
• Monitor compliance with UK GDPR and wider global privacy regulations.
• Support internal audits, certification activities, and compliance reviews.
• Assist with data subject rights requests and privacy incident management.
• Deliver privacy guidance, training, and awareness initiatives across the business.
• Provide practical privacy advice to stakeholders and support privacy-by-design initiatives. Based on responsibilities outlined in

About You

• Previous experience in a Privacy, Data Protection, Risk, Compliance, Governance, or Legal role.
• Experience conducting DPIAs (Data Protection Impact Assessments) and/or demonstrable experience reviewing, drafting, or advising on Data Processing Agreements (DPAs) is essential.
• Strong understanding of UK GDPR and broader data protection principles.
• Ability to identify, assess, and communicate privacy risks effectively.
• Strong stakeholder management and relationship-building skills.
• Curious about AI, emerging technologies, and their privacy implications.
• Professional services experience is advantageous but not essential.
• CIPP/E or similar privacy qualification would be beneficial. Based on the qualifications and experience requirements in

What's on Offer

• Exposure to complex, international privacy matters.
• Significant stakeholder engagement across the business.
• Career development within an established Risk & Compliance function.
• Flexible hybrid working.
• Competitive salary and benefits package.

If you're looking to build your career in privacy, risk, and data protection within a collaborative and forward-thinking environment, we'd love to hear from you.