Data Protection Analyst

Heathrow; Greater London; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Performance bonuses

Share in Success

Generous leave

Private health insurance

Pension scheme

Learning & development

Job summary

Heathrow is seeking a Data Protection Officer to oversee privacy compliance across the organisation, manage rights requests, and incident handling. The role partners with internal teams and external stakeholders to strengthen privacy governance.

You'll drive privacy-by-design initiatives, develop KPI reports, and advance the DPO Office's digital presence while supporting the organisation's digital transformation journey and regulatory obligations.

Qualifications

• Knowledge of data protection legislation including UK GDPR and PECR.
• Experience in fast-paced environments with competing priorities and deadlines.
• Strong stakeholder management across internal and external partners.
• Ability to work both independently and within a team.

Responsibilities

• Coordinate core DPO activities: compliance reviews, reporting, and scheduling.
• Support the complaints process with investigations and timely resolutions.
• Manage rights requests process and ensure statutory deadlines.
• Provide privacy guidance and privacy-by-design support.
• Maintain the DPO's digital presence and knowledge resources.
• Support privacy incident and third-party risk management.

Skills

UK GDPR

PECR

Stakeholder management

Privacy by design

Team collaboration

Education

Degree-level qualification

CIPP/E

CIPM

Apprenticeship or equivalent experience

Tools

Microsoft 365

SharePoint

Excel

Office 365 eDiscovery

Adobe Acrobat Pro

Job description

Introduction

Heathrow is a city within a city – a complex ecosystem that provides an astonishing variety of high profile, absorbing work. From helping protect the data on which the safety of millions of passengers depends, to negotiating licenses for airlines and drafting leases for hundreds of shops and restaurants, there are opportunities for interesting, inspiring work at every turn. Not least in mitigating and managing risk in the wider aviation industry to ensure generations to come can enjoy the freedom and excitement of air travel.

Introduction

Heathrow is a city within a city – a complex ecosystem that provides an astonishing variety of high profile, absorbing work. From helping protect the data on which the safety of millions of passengers depends, to negotiating licenses for airlines and drafting leases for hundreds of shops and restaurants, there are opportunities for interesting, inspiring work at every turn. Not least in mitigating and managing risk in the wider aviation industry to ensure generations to come can enjoy the freedom and excitement of air travel. Our Legal & Business Assurance function brings together legal and business assurance professionals, all committed to living our values. Together, we operate within regulatory and statutory frameworks, always acting responsibly and doing the right thing. You’ll be making sure we operate to the highest standards, across the kind of varied projects that you only find in an ever-changing environment like ours. Part of a close-knit and driven team, you’ll take on work you’ll both take real pride in and feel passionate about.

Job Description

This role supports the day-to-day operation of the Office of the Data Protection Officer (DPO), ensuring the effective management of privacy-related activities across the organisation. The position plays a key role in overseeing privacy complaints, managing the end-to-end process for rights requests and incident management, and providing advice and guidance on a wide range of privacy matters. Working with both internal and external stakeholders, you will be responsible for driving process improvements, developing reports and dashboards, supporting compliance assessments and privacy-by-design initiatives, and enhancing the DPO Office’s online presence. The role also contributes to the organisation’s digital transformation journey, helping to evolve and strengthen privacy services, processes, and stakeholder engagement.

Your role will involve

• Coordinate and manage core DPO activities, including compliance reviews, reporting, stakeholder communications, and the scheduling of regular privacy-related activities.
• Support the complaints process, ensuring timely investigation, stakeholder engagement, record-keeping, reporting, dashboard creation, and professional resolution within agreed timescales.
• Operate, maintain, and continuously improve the rights requests process, ensuring compliance with statutory deadlines, monitoring performance, and engaging effectively with internal and external stakeholders.
• Provide privacy advice and guidance to stakeholders, supporting privacy-by-design principles, data protection assessments, compliance activities, and the timely completion of privacy-related requirements.
• Maintain and enhance the Office of the DPO's digital presence and knowledge resources, including the management of online content, self-service tools, training materials, and the team inbox.
• Support privacy incident and third-party risk management, including investigations, fact-finding, reporting, mitigation activities, lessons learned, and oversight of personal data processing by suppliers and partners.
• Produce and analyse privacy management information, including KPIs, dashboards, reports, and trend analyses, identifying opportunities for process improvement and enhancing the effectiveness of the privacy function.

These Skills Are Essential

• Knowledge of data protection legislation, including UK GDPR, PECR, the Data (Use and Access) Act (DUAA), and related privacy regulations.
• Experience of working in a fast-paced environment, managing competing priorities, ad hoc requests, and fixed deadlines.
• Strong stakeholder management skills, with the ability to build and maintain positive relationships across a range of internal and external stakeholders.
• Proven ability to work collaboratively as part of a team while managing responsibilities independently.

Ideally, you'll also have:

• Degree-level qualification, apprenticeship, or equivalent relevant work experience.
• Professional privacy qualifications such as CIPP/E, CIPM, or equivalent certifications.
• Experience of using Microsoft 365 applications, including SharePoint, Excel, and Office 365 eDiscovery, as well as Adobe Acrobat Pro.
• Experience of web content management or webpage design.
• Experience of service design, implementation, monitoring, and continuous improvement.

About Us

There’s something so special about working at the world’s most iconic airport. Its sights. Its sounds. Its constant air of excitement. Heathrow is an amazing backdrop to a career filled with unique opportunities. Every day, you’ll discover a world full of fresh possibilities and end the day buzzing with stories to tell, as you encounter people from all cultures, nationalities and experiences. A world full of pride for what we do and no end of exciting career prospects to explore. It brings out the best in all of us. And inspires everyone to deliver on our ambitious plans. Together, we’re working to welcome millions more passengers while ensuring aviation can continue to be a force for good by leading global efforts in sustainability. Join us on that journey and we'll help you achieve your ambitions too. Supporting you to learn, encouraging you to be yourself, backing you to achieve more than you might ever have imagined. Because there’s no place like Heathrow.

Our rewards

We offer competitive salaries and excellent benefits that will support you now and in the future. As well as performance-based annual bonuses and our longer-term Share in Success Bonus plans, we also offer generous annual leave allowances and market-leading pensions. With family friendly policies, access to private health insurance and a wide range of wellbeing tools, we’ll support you to be at your best inside and outside work. And of course, we’ll provide varied learning and development opportunities too. Here you’ll find everything you need for a fulfilling career journey that can take you in exciting directions.

Working Location

Our Hybrid working approach offers the opportunity for colleagues in some roles to work from home for an average of two days a week, providing the flexibility to work in an agile way whilst ensuring we deliver for the operational needs of Heathrow . Working arrangements vary from team to team and will be confirmed during the recruitment process. You’ll need to be based in the UK and within a commutable distance to Heathrow.

Sustainable Travel to work

Heathrow’s Sustainable Travel Guide sets out easy and sustainable travel options that everyone can access.

Equal Opportunities

As an equal opportunities employer, we encourage applications from all. We believe that diverse talent makes us stronger – not least because we welcome passengers from all corners of the globe, every single day. Heathrow is an accessible place to work. With five diversity networks, we champion inclusivity and celebrate individuality.