Privacy Analyst

Harrison Holgate; City Of London; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

Harrison Holgate is seeking a Privacy Analyst to join our Data Protection & AI Risk team on a 12-month fixed-term contract in London. You will help shape data privacy governance, manage data subjects requests, and support regulatory compliance across the business.

In this hands-on role you'll collaborate with IT, Legal, HR and Procurement to implement privacy controls, assess AI-related privacy risks, and ensure documentation keeps pace with new projects and technology developments.

Qualifications

• At least three years' experience in data protection, privacy, compliance, legal operations or a related risk role.
• Good working knowledge of UK GDPR, Data Protection Act, data subject rights and DPIAs.
• Experience using privacy management platforms (e.g., OneTrust).
• Understanding of supplier risk, data processing agreements and international data transfers.
• Interest in AI governance and privacy risks with emerging tech.
• Strong communication skills to engage stakeholders across the business.

Responsibilities

• Administer OneTrust privacy platform workflows, records and reporting.
• Manage data subject access requests within statutory deadlines.
• Coordinate PIAs/DPIAs and other risk assessments for new projects.
• Maintain data inventories and processing records for audits.
• Review data processing agreements and contractual safeguards.
• Assess privacy risks associated with internal and third-party AI solutions.
• Track actions, identify control gaps and escalate material risks.
• Embed privacy-by-design across the business and provide practical guidance.

Skills

UK GDPR

OneTrust

Data protection

Privacy compliance

AI governance

Supplier risk

PIA/DPIA

Communication skills

Education

CIPP/E or CIPM

Tools

OneTrust

Job description

Privacy Analyst - Data Protection & AI Risk

Salary: Up to £80,000 London / Hybrid 12-month FTC

Are you looking to develop your career in data protection, privacy and AI governance within a dynamic, growing insurance business?

We're recruiting a Privacy Analyst to join the team on a 12-month fixed-term contract. This is a great opportunity to take on a varied, hands-on role, working across data protection, regulatory compliance, supplier risk and the evolving area of responsible AI.

You'll play an important part in supporting the business's data protection and governance frameworks, helping ensure privacy risks are identified, managed and properly documented as new projects, systems and technologies are introduced.

The Role

This is a broad operational role where you'll work closely with the Data Protection Officer and colleagues across the business, including IT, Legal, HR, Procurement and other technical and business teams.

Key responsibilities will include:

• Supporting the administration of the OneTrust privacy management platform, maintaining workflows, records and reporting.
• Managing data subject access requests and other individual data rights requests, ensuring they are handled accurately and within statutory deadlines.
• Coordinating Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) and other risk assessments for new projects, systems and business initiatives.
• Maintaining data inventories, records of processing activities and supporting evidence for audit and governance purposes.
• Conducting supplier privacy due diligence and supporting reviews of data processing agreements and contractual safeguards.
• Assessing privacy and responsible-use risks associated with internal and third-party AI solutions.
• Tracking actions, identifying potential control gaps and escalating material risks where appropriate.
• Helping embed a privacy-by-design approach across the business, providing practical guidance to stakeholders and supporting continuous improvement.

About You

We're looking for someone organised, curious and proactive, with a genuine interest in data protection and the opportunity to develop their expertise in AI governance.

You’ll ideally have:

• At least three years' experience in data protection, privacy, compliance, legal operations or a related risk role, preferably within insurance or financial services.
• A good working knowledge of UK GDPR, the Data Protection Act, data subject rights and DPIAs.
• Experience using OneTrust or a similar privacy management platform.
• An understanding of supplier risk, data processing agreements and international data transfers.
• An interest in AI governance and the privacy risks associated with emerging technologies.
• Strong communication skills and the confidence to work with a range of stakeholders across the business.

Relevant privacy qualifications, such as CIPP/E or CIPM, would be beneficial but are not essential.

Why Consider This Opportunity?

This is an excellent opportunity to join a thriving insurance business and build on your existing compliance or privacy experience in an area that continues to grow in importance.

You’ll gain exposure to both established data protection responsibilities and the developing field of AI risk, working alongside experienced colleagues in a collaborative environment that values flexibility, inclusion and professional development.

The Details

• Salary: Up to £80,000
• Location: London
• Working pattern: Hybrid, typically 1-2 days per week in the office
• Contract: 12-month fixed-term contract
• Working arrangements: Flexible options, including reduced hours and job-share partnerships, will be considered.

If you have a background in compliance or data protection and are keen to broaden your experience across privacy and AI governance, we'd love to hear from you.