Data Privacy Analyst, Specialist

The Vanguard Group; City Of London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Vanguard Group is seeking a Data Privacy Analyst to embed privacy into product design and business processes across a global organisation. The role collaborates with technology, legal, compliance and risk teams to protect personal information while enabling responsible data use.

You will lead privacy risk assessments, provide practical guidance, and support third‑party engagements, with a hybrid office schedule in the UK.

Qualifications

• Experience in privacy, data protection, compliance, risk, legal, or governance functions.
• Strong knowledge of UK GDPR, EU GDPR, and related privacy regulations.
• The ability to assess risks, solve problems, and provide clear, practical advice.
• Strong communication and stakeholder management skills, with the confidence to work across different teams and levels of the organisation.
• A collaborative mindset and a willingness to learn from and support others.
• Sound judgement and the ability to balance regulatory requirements with business objectives.
• An interest in emerging technologies, data-driven innovation, and the evolving privacy landscape.

Responsibilities

• Provide expert advice on privacy and data protection requirements, including UK GDPR, EU GDPR, ePrivacy requirements, AI-related privacy obligations, and other applicable regulations.
• Serve as a trusted advisor to stakeholders, embedding Privacy by Design principles into new products, technologies, processes, and strategic initiatives
• Lead privacy-related forums and trainings to increase awareness around the privacy program as well as to ensure adherence to data privacy laws and regulations.
• Oversee daily incident assignments, investigations and response activities to ensure adherence to applicable regulatory and notification requirements.
• Review business initiatives, projects, and technology implementations to identify privacy risks and compliance obligations.

Skills

Privacy principles

Data protection

Regulatory compliance

Stakeholder management

Communication

Collaborative mindset

Emerging technologies

Education

Bachelor's degree

Tools

Privacy management platforms

Job description

Data Privacy Analyst

Our Privacy Team is dedicated to helping Vanguard protect personal information and uphold the trust placed in us by our clients, crew, and regulators. We provide expert guidance on privacy and data protection, helping the business navigate evolving regulatory requirements while enabling the responsible use of data.

The Role

Working closely with colleagues across business, technology, legal, compliance, and risk teams, you will embed privacy into the design of products, services, processes, and emerging technologies. We are a collaborative and inclusive team that values diverse perspectives, practical problem-solving, and continuous learning. Joining our team offers the opportunity to make a meaningful impact by helping shape privacy practices across a global organisation. You'll contribute to protecting individuals' rights, influencing how data is used responsibly, and supporting innovation in a way that aligns with Vanguard's commitment to doing the right thing for our clients and crew.

In this role you will

• Provide expert advice on privacy and data protection requirements, including UK GDPR, EU GDPR, ePrivacy requirements, AI-related privacy obligations, and other applicable regulations.
• Serve as a trusted advisor to stakeholders, embedding Privacy by Design principles into new products, technologies, processes, and strategic initiatives
• Lead privacy-related forums and trainings to increase awareness around the privacy program as well as to ensure adherence to data privacy laws and regulations.
• Oversee daily incident assignments, investigations and response activities to ensure adherence to applicable regulatory and notification requirements.
• Review business initiatives, projects, and technology implementations to identify privacy risks and compliance obligations.

Privacy Risk Management

• Conduct and review Privacy Risk Assessments (PRAs), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and other privacy risk assessments.
• Identify privacy risks and recommend proportionate mitigation strategies.
• Monitor and track remediation activities for privacy-related findings and control gaps.
• Support the maintenance of privacy risk registers and issue management activities.
• Provide privacy guidance when onboarding third-party services and vendor engagements

Privacy by Design

• Embed Privacy by Design and Default principles in business processes, products, systems, and AI solutions.
• Partner with technology, cybersecurity, legal, compliance, and risk teams throughout project lifecycles.
• Review data flows, retention practices, consent mechanisms, and transparency requirements.
• Provide guidance on data minimisation, purpose limitation, and lawful processing.

What it takes

• Experience in privacy, data protection, compliance, risk, legal, governance, or a related field.
• A strong understanding of privacy principles and data protection requirements.
• The ability to assess risks, solve problems, and provide clear, practical advice.
• Strong communication and stakeholder management skills, with the confidence to work across different teams and levels of the organisation.
• A collaborative mindset and a willingness to learn from and support others.
• Sound judgement and the ability to balance regulatory requirements with business objectives.
• An interest in emerging technologies, data-driven innovation, and the evolving privacy landscape.

Most importantly, we're looking for people who are committed to protecting individuals' privacy, building trusted relationships, and contributing to an inclusive team where diverse perspectives and experiences are valued.

Qualifications

• Privacy related experience, compliance or regulatory experience in the financial services industry preferred.
• Bachelor's degree in Law, Information Management, Business, Risk Management, or related discipline.
• Significant experience in privacy, data protection, compliance, risk, legal, or governance functions.
• Strong knowledge of UK GDPR, EU GDPR, and related privacy regulations.

Preferred Qualifications

• CIPP/E, CIPM, CIPT, or equivalent privacy certification.
• Experience supporting AI governance or emerging technology assessments.
• Knowledge of privacy requirements across multiple jurisdictions.
• Experience with privacy management platforms and governance tool

Special Factors

• This is a hybrid position and would require you to work in the office 3 days per week (Tuesday, Wednesday & Thursday)

When all crew members feel valued and included, our ability to collaborate and innovate is amplified, and we are united in delivering on Vanguard's core purpose: to take a stand for all investors, to treat them fairly, and to give them the best chance for investment success.

Why Vanguard?

Vanguard is a different kind of investment company. It was founded in the United States in 1975 on a simple but revolutionary idea: that an investment company should manage its funds solely in the interests of its clients.

This is a philosophy that has helped millions of people around the world to achieve their goals with low-cost, uncomplicated investments.

It's what we stand for: value to investors.

Inclusion Statement

Vanguard’s continued commitment to diversity and inclusion is firmly rooted in our culture. Every decision we make to best serve our clients, crew (internally employees are referred to as crew), and communities is guided by one simple statement: “Do the right thing.”

We believe that a critical aspect of doing the right thing requires building diverse, inclusive, and highly effective teams of individuals who are as unique as the clients they serve. We empower our crew to contribute their distinct strengths to achieving Vanguard’s core purpose through our values.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.