Data Protection Analyst

Nuffield Health; Greater London; Hybrid; GBP 38,000 - 52,000; Full time

Benefits offered by this job

Free gym membership

Health assessments

Pension options

Job summary

Nuffield Health is seeking a Data Protection Analyst in London (Barbican) with hybrid working. The role focuses on supporting the data protection framework, ensuring GDPR compliance and embedding privacy best practice across the organisation.

You will coordinate DSARs, assist DPIAs/PIAs/LIAs, manage data breach activities, and produce leadership information. Relevant IAPP/BCS qualification is desirable and a competitive salary is offered.

Qualifications

• Experience in Data Protection, Privacy, Compliance, Information Governance or Risk roles.
• Knowledge of UK GDPR and Data Protection Act 2018.
• Experience handling DSARs and other data subject rights requests.
• Experience supporting DPIAs/PIAs/LIAs or privacy assessments.
• Experience with data sharing reviews or third-party privacy due diligence advantageous.
• Experience maintaining records and compliance documentation.

Responsibilities

• Support delivery and improvement of the Data Protection Framework and documentation.
• Coordinate DSARs and other subject rights requests with deadlines.
• Provide practical privacy guidance to colleagues and projects.
• Assist DPIAs/PIAs/LIAs and reviews of high-risk processing activities.
• Assist in managing data breaches, audits, and assurance reviews.
• Support third-party privacy due diligence and data sharing reviews.
• Produce reports, dashboards and management information to improve compliance.
• Develop training materials and privacy awareness to embed accountability.
• Perform other duties as required and build cross-team relationships across the organisation.

Skills

Data protection & privacy

DSAR handling

DPIAs/PIAs/LIAs

Records & audit trails

Stakeholder management

MS Office (Outlook/Word/Excel)

Data breach knowledge

Reporting & MI

Clear communication

Education

IAPP/BCS Practitioner Data Protection certificate

Tools

Microsoft Office

Job description

Barbican, London | Hybrid Working | Information Security & Data Protection | Permanent | Full-Time

Competitive Salary Available, Depending On Experience

37.5 hours per week

An exciting opportunity has arisen within the Information Security & Data Protection team, who are looking for someone to join them as a Data Protection Analyst.

Working closely with the Data Protection Lead, Information Security colleagues and stakeholders across the business, the successful candidate will play a key role in supporting the organisation's data protection framework, ensuring compliance with data protection legislation and embedding privacy best practice across the organisation.

The successful individual will hold the following responsibilities:

• Support the delivery and continuous improvement of Nuffield Health's Data Protection Framework, including maintaining data protection records, documentation and accountability evidence, ensuring compliance with UK data protection legislation and organisational policies.
• Coordinate and manage Data Subject Rights Requests, including DSARs, rectification, erasure, restriction, portability and objection requests, ensuring statutory deadlines are met and accurate records are maintained. Support the ongoing development and improvement of related processes and controls.
• Provide practical day-to-day data protection advice and guidance to colleagues, supporting projects, operational teams and business change initiatives while promoting privacy by design.
• Support the completion of DPIAs, PIAs, LIAs and reviews of high-risk processing activities, ensuring privacy risks are appropriately identified, assessed and managed.
• Assist in the management of personal data breaches, compliance monitoring activities, audits and assurance reviews, including maintaining risk registers, incident records and improvement plans.
• Support third-party privacy due diligence activities, including reviews of Data Processing Agreements, data sharing arrangements, processors and international data transfers.
• Produce reports, metrics, dashboards and management information, analysing trends and identifying opportunities to improve compliance, efficiency and data protection performance.
• Support the development of training, awareness materials, guidance documents and self-service tools, acting as a privacy champion and helping to embed a culture of accountability and transparency across the organisation.
• The role holder will be expected to perform any other duties that may reasonably be asked of them.
• The role holder will need to build and maintain effective relationships at all levels across the organisation.

Skills, Qualifications and Experience:

• Experience working within a Data Protection, Privacy, Compliance, Information Governance or Risk role.
• Good understanding of UK GDPR, the Data Protection Act 2018 and associated privacy requirements.
• Experience supporting and/or coordinating Data Subject Access Requests (DSARs) and other data subject rights requests.
• Experience supporting DPIAs, PIAs, LIAs or similar privacy assessments.
• Experience supporting supplier, third-party or data sharing reviews would be advantageous.
• Knowledge of personal data breach management and incident response processes.
• Experience maintaining records, registers, audit trails and compliance documentation.
• Strong organisational skills with the ability to manage multiple priorities and deadlines effectively.
• Excellent attention to detail and analytical skills.
• Strong written and verbal communication skills, with the ability to explain data protection requirements clearly to a range of stakeholders.
• Confident IT user with strong skills in Microsoft Office applications, particularly Outlook, Word and Excel.
• Ability to build effective working relationships and influence stakeholders across different teams.
• Experience producing reports, dashboards, metrics or management information would be advantageous.
• Professional data protection qualifications such as IAPP, BCS Practitioner Certificate in Data Protection or equivalent would be desirable.

Helping you feel good.

We want you to love coming to work, feeling healthy, happy and valued. That's why we've developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.

At Nuffield Health, we take care of what's important to you.