Privacy Analyst

IDEX Consulting Ltd; Greater London; On-site; GBP 45,000 - 60,000; Full time

Job summary

IDEX Consulting Ltd is seeking a Privacy Analyst to join a leading specialist insurance business in the City of London on a 12-month fixed-term contract. You will support day-to-day privacy operations, maintain governance processes and contribute to AI governance and responsible data use.

You will work with the Data Protection Officer and cross-functional teams to ensure privacy processes are effective, records are kept up-to-date and risks are addressed.

Qualifications

• Experience in data protection, privacy, compliance or related operational risk.
• Practical knowledge of UK GDPR and Data Protection Act requirements.
• Hands-on experience administering OneTrust or a comparable privacy management platform.
• Experience with DPIAs, data mapping, ROPA and Data Subject Rights Requests.
• Understanding of supplier risk assessments and data processing agreements.

Responsibilities

• Administer and maintain OneTrust platform including workflows, templates, permissions and reporting.
• Maintain data inventories, data maps and ROPOs (Records of Processing Activities).
• Coordinate Data Subject Rights Requests, including Subject Access Requests, meeting statutory deadlines.
• Manage privacy screening for new projects and systems.
• Coordinate PIAs and DPIAs and related risk assessments.
• Support supplier privacy due diligence and review data processing agreements.
• Conduct privacy and responsible-use risk assessments for internal and third-party AI solutions.
• Assess AI-related risks around data usage, provenance, transparency and security.
• Maintain compliance records and track remediation actions.

Skills

OneTrust administration

Privacy compliance

Data mapping

DPIAs

PIAs

Education

CIPP/E or CIPM

Tools

OneTrust

Job description

Privacy Analyst – 12 Month Fixed-Term Contract

City of London | Specialist Insurance | GDPR | OneTrust | AI Governance

IDEX Consulting are currently recruiting for a Privacy Analyst to join a leading specialist insurance business based in the City of London on an initial 12-month fixed-term contract.

This is an excellent opportunity to join a growing Data Protection and Governance function, supporting the day-to-day operation of its privacy framework while contributing to the development of its wider governance capabilities.

The role offers exposure to a broad range of privacy activities, including GDPR compliance, OneTrust administration, privacy impact assessments, supplier risk and the increasingly important area of AI governance.

The Opportunity

Working closely with the Data Protection Officer and wider business teams, you'll play an important role in ensuring privacy processes are effectively managed, records are maintained and potential risks are identified and addressed.

You'll also have the opportunity to contribute to the development of privacy-by-design processes and support assessments of emerging AI technologies and their responsible use within the business.

Key Responsibilities

• Administer and maintain the OneTrust platform, including workflows, templates, permissions and reporting.
• Maintain data inventories, data maps and Records of Processing Activities (ROPA).
• Coordinate Data Subject Rights Requests, including Subject Access Requests, ensuring statutory deadlines are met.
• Manage privacy screening for new projects, systems and business initiatives.
• Coordinate Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) and related risk assessments.
• Support supplier privacy due diligence, reviewing data processing arrangements and contractual safeguards.
• Conduct privacy and responsible-use risk assessments for internal and third-party AI solutions.
• Assess AI-related risks around data usage, provenance, transparency, human oversight, security and potential impacts on individuals.
• Maintain compliance records, track remediation actions and produce management information.
• Work collaboratively with IT, HR, Legal, Procurement and business stakeholders to embed privacy by design.

What We're Looking For

• Experience within data protection, privacy, compliance or a closely related operational risk role.
• Practical knowledge of UK GDPR and Data Protection Act requirements.
• Hands-on experience administering OneTrust or a comparable privacy management platform.
• Experience with DPIAs, data mapping, ROPA and Data Subject Rights Requests.
• An understanding of supplier risk assessments and data processing agreements.
• Good technical awareness of systems, cloud services, data flows and information security.
• An interest in AI governance, responsible AI and the privacy risks associated with emerging technologies.
• Excellent organisational skills, attention to detail and stakeholder management capabilities.
• CIPP/E, CIPM or equivalent privacy qualification.
• OneTrust certification or relevant platform administration experience.
• Exposure to AI governance, generative AI or responsible AI frameworks.
• Previous experience within financial services, insurance or another regulated environment.

Why Consider This Opportunity?

This is a great opportunity to join a specialist insurance business and contribute to the ongoing development of its Data Protection and Governance framework.

The 12-month contract offers the chance to take ownership of key operational privacy processes, work closely with experienced stakeholders and gain valuable exposure to the developing areas of AI governance and responsible data use.

It's particularly suited to someone who enjoys a hands-on role, is comfortable working across different business functions and wants to broaden their experience within a regulated insurance environment.