Data Privacy & Protection Analyst (Hybrid UK)

Vitality; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12%

Vitality health insurance

Life Assurance

Job summary

Vitality in London is hiring a Data Protection Analyst to safeguard data across the Group. You’ll manage data protection incidents, advise teams on privacy matters and support cross-border issues, working with the Group Head of Data Protection to balance compliance with business needs.

You will provide authoritative guidance, lead health checks and audits, oversee DSARs, assess risks for new activities and embed privacy by design.

Qualifications

• Extensive working knowledge of UK and EU GDPR and the UK Data Protection Act 2018
• Strong practical experience managing and resolving data protection breaches and incidents
• Proven experience managing Data Subject Rights requests, including complex or technically challenging cases
• Confidence interpreting regulatory requirements and resolving complex data protection queries
• Strong judgement and problem-solving capability within a complex organisation
• Proven ability to influence, advise and constructively challenge stakeholders across different levels of a business
• Ability to assess privacy risk and develop pragmatic solutions that balance compliance, commercial considerations and customer experience
• Experience within regulatory, operational or conduct risk in an FCA or PRA-regulated financial services environment and knowledge of the wider European and global privacy environment would be advantageous

Responsibilities

• Provide authoritative data protection advice and challenge across the business, translating complex regulatory requirements into clear, practical and proportionate solutions
• Lead data protection health checks and audits across business areas, evaluating compliance, identifying material risks and driving appropriate remediation and escalation
• Oversee the management of data protection incidents, ensuring breaches are effectively assessed, investigated, remediated and escalated in line with Group requirements
• Take ownership of Data Subject Rights requests across the Vitality Group, ensuring complex cases are managed effectively and regulatory obligations are consistently met
• Assess data protection risks arising from new business activities, projects and strategic initiatives, including Privacy Impact Assessments and the development of appropriate mitigating controls
• Influence stakeholders across the business to embed strong data protection practices and ensure privacy considerations are built into operational and strategic decision‑making
• Drive the continued development and improvement of Vitality’s data protection framework, strengthening policies, processes, controls and standards in line with regulatory expectations and business needs
• Develop and deliver effective data protection training and guidance, strengthening understanding and accountability for privacy across the organisation
• Produce meaningful privacy reporting and root cause analysis, identifying trends, emerging risks and areas requiring further action or senior escalation

Skills

Data protection

Privacy risk management

Regulatory judgement

Job description

Vitality in London is hiring a Data Protection Analyst to safeguard data across the Group. You’ll manage data protection incidents, advise teams on privacy matters and support cross-border issues, working with the Group Head of Data Protection to balance compliance with business needs.

You will provide authoritative guidance, lead health checks and audits, oversee DSARs, assess risks for new activities and embed privacy by design.