Data Protection Analyst

nuffieldhealth; Greater London; On-site; GBP 45,000 - 60,000; Full time

Benefits offered by this job

Free gym membership

Health assessments

Retail discounts

Pension options

Job summary

Nuffield Health in London (Barbican) is seeking a Data Protection Analyst to join the Information Security & Data Protection team on a hybrid basis. The role focuses on maintaining the Data Protection Framework, handling DSARs, and supporting DPIAs, while ensuring compliance with UK data protection legislation.

You will provide practical privacy guidance, coordinate risk assessments, and contribute to governance, training and incident management across the organisation.

Qualifications

• Experience in Data Protection, Privacy, Compliance or Information Governance roles.
• Solid understanding of UK GDPR and the Data Protection Act 2018.
• Experience coordinating DSARs and other data subject rights requests.
• Knowledge of DPIAs/PIAs/LIAs and privacy assessments.

Responsibilities

• Support delivery and ongoing improvement of the Data Protection Framework, maintain records and accountability evidence.
• Coordinate DSARs and other data subject rights requests ensuring deadlines are met.
• Provide practical data protection guidance to colleagues and promote privacy by design.
• Assist in DPIAs/PIAs/LIAs and reviews of high-risk processing activities.
• Support management of data breaches, audits and assurance activities.
• Assist third-party privacy due diligence, data sharing reviews and DPIAs.
• Produce reports, dashboards and management information to improve compliance.
• Contribute to training materials and privacy awareness across the organisation.

Skills

Data protection framework knowledge

DSAR handling

Privacy by design

Analytical skills

Organisational skills

Communication skills

Education

IAPP / CIPP or equivalent data protection qualification

Tools

MS Office (Outlook/Word/Excel)

Job description

Data Protection Analyst

Barbican, London | Hybrid Working | Information Security & Data Protection | Permanent | Full-Time

Competitive salary available, depending on experience

37.5 hours per week

An exciting opportunity has arisen within the Information Security & Data Protection team, who are looking for someone to join them as a Data Protection Analyst .

The successful individual will hold the following responsibilities:

• Support the delivery and continuous improvement of Nuffield Health's Data Protection Framework, including maintaining data protection records, documentation and accountability evidence, ensuring compliance with UK data protection legislation and organisational policies.
• Coordinate and manage Data Subject Rights Requests, including DSARs, rectification, erasure, restriction, portability and objection requests, ensuring statutory deadlines are met and accurate records are maintained. Support the ongoing development and improvement of related processes and controls.
• Provide practical day-to-day data protection advice and guidance to colleagues, supporting projects, operational teams and business change initiatives while promoting privacy by design.
• Support the completion of DPIAs, PIAs, LIAs and reviews of high-risk processing activities, ensuring privacy risks are appropriately identified, assessed and managed.
• Assist in the management of personal data breaches, compliance monitoring activities, audits and assurance reviews, including maintaining risk registers, incident records and improvement plans.
• Support third-party privacy due diligence activities, including reviews of Data Processing Agreements, data sharing arrangements, processors and international data transfers.
• Produce reports, metrics, dashboards and management information, analysing trends and identifying opportunities to improve compliance, efficiency and data protection performance.
• Support the development of training, awareness materials, guidance documents and self-service tools, acting as a privacy champion and helping to embed a culture of accountability and transparency across the organisation.
• The role holder will be expected to perform any other duties that may reasonably be asked of them.
• The role holder will need to build and maintain effective relationships at all levels across the organisation.

Skills, Qualifications and Experience:

• Experience working within a Data Protection, Privacy, Compliance, Information Governance or Risk role.
• Good understanding of UK GDPR, the Data Protection Act 2018 and associated privacy requirements.
• Experience supporting and/or coordinating Data Subject Access Requests (DSARs) and other data subject rights requests.
• Experience supporting DPIAs, PIAs, LIAs or similar privacy assessments.
• Experience supporting supplier, third-party or data sharing reviews would be advantageous.
• Knowledge of personal data breach management and incident response processes.
• Experience maintaining records, registers, audit trails and compliance documentation.
• Strong organisational skills with the ability to manage multiple priorities and deadlines effectively.
• Excellent attention to detail and analytical skills.
• Strong written and verbal communication skills, with the ability to explain data protection requirements clearly to a range of stakeholders.
• Confident IT user with strong skills in Microsoft Office applications, particularly Outlook, Word and Excel.
• Ability to build effective working relationships and influence stakeholders across different teams.
• Experience producing reports, dashboards, metrics or management information would be advantageous.
• Professional data protection qualifications such as IAPP, BCS Practitioner Certificate in Data Protection or equivalent would be desirable.

Helping you feel good.

We want you to love coming to work, feeling healthy, happy and valued. That's why we've developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.

At Nuffield Health, we take care of what's important to you.