Data Privacy Analyst - GDPR & AI Governance (Flexible)

iwoca; Greater London; On-site; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Flexible working hours

Medical insurance (Vitality)

Dental plan or health cash plan

Private GP service

25 days’ holiday + birthday day off +

Sabbatical after 4 years

Counselling & therapy access

3% Pension contributions

Employee equity incentive scheme

Parental leave & nursery tax benefit

Electric car scheme & cycle to work

Two company retreats a year

Learning & development budget

Company-wide talks

Treehouse access

Job summary

iwoca is seeking a Data Privacy Analyst to manage day-to-day UK data protection work and ensure practical application of UK GDPR and PECR. You will drive DPIAs, DSARs, and breach handling, while identifying opportunities to automate privacy processes with AI and enhancements across the business.

You will report to the Data Privacy Manager and collaborate with the Head of Compliance. The role offers growth as privacy framework ownership expands and aligns with regulatory expectations.

Qualifications

• Experience in data protection or privacy operations.
• Solid understanding of UK GDPR, the Data Protection Act 2018 and PECR.
• Hands-on experience with statutory work: DSARs, DPIAs, breach handling, record maintenance.

Responsibilities

• Own data subject access requests from intake to response and manage related rights.
• Assist with privacy reviews and DPIAs across new products and data flows.
• Support AI tooling assessments and address risks in automated decision-making.
• Maintain records of processing activities and data protection policies.
• Provide clear privacy guidance to non-specialist teams across iwoca.

Skills

Data protection

Privacy operations

UK GDPR

PECR

DSARs

DPIAs

Breach handling

AI & automation

Stakeholder management

Tools

Claude Code

LLMs

Privacy platforms

Job description

iwoca is seeking a Data Privacy Analyst to manage day-to-day UK data protection work and ensure practical application of UK GDPR and PECR. You will drive DPIAs, DSARs, and breach handling, while identifying opportunities to automate privacy processes with AI and enhancements across the business.

You will report to the Data Privacy Manager and collaborate with the Head of Compliance. The role offers growth as privacy framework ownership expands and aligns with regulatory expectations.