Privacy Analyst

Harrison Holgate; Greater London; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

Harrison Holgate in London is seeking a Privacy Analyst to join the Risk & Compliance team on a 12-month fixed-term contract. This role focuses on data protection, privacy and AI governance within a growing insurance business.

The role involves supporting privacy frameworks, handling data rights requests, and coordinating PIAs/DPIAs across projects, systems and suppliers.

Qualifications

• At least three years’ experience in data protection, privacy, compliance, legal operations or a related risk role, preferably within insurance or financial services.
• Good working knowledge of UK GDPR, the Data Protection Act, data subject rights and DPIAs.
• Experience using OneTrust or a similar privacy management platform.
• Understanding of supplier risk, data processing agreements and international data transfers.
• Interest in AI governance and the privacy risks associated with emerging technologies.
• Strong communication skills and the confidence to work with a range of stakeholders across the business.

Responsibilities

• Support the administration of the OneTrust privacy management platform, maintaining workflows, records and reporting.
• Manage data subject access requests and other individual data rights requests, ensuring they are handled accurately and within statutory deadlines.
• Coordinate Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) and other risk assessments for new projects, systems and business initiatives.
• Maintain data inventories, records of processing activities and supporting evidence for audit and governance purposes.
• Conduct supplier privacy due diligence and supporting reviews of data processing agreements and contractual safeguards.
• Assess privacy and responsible-use risks associated with internal and third‑party AI solutions.
• Tracking actions, identifying potential control gaps and escalating material risks where appropriate.
• Helping embed a privacy-by-design approach across the business, providing practical guidance to stakeholders and supporting continuous improvement.

Skills

UK GDPR

OneTrust

Privacy

AI governance

DPIAs

Stakeholder mgmt

Tools

OneTrust

Job description

Privacy Analyst

Risk & Compliance

London

£80,000

Reference: HH/RF-14282

Privacy Analyst – Data Protection & AI Risk

Salary: Up to £80,000 | London / Hybrid | 12-month FTC

Are you looking to develop your career in data protection, privacy and AI governance within a dynamic, growing insurance business?

We’re recruiting a Privacy Analyst to join the team on a 12-month fixed-term contract. This is a great opportunity to take on a varied, hands-on role, working across data protection, regulatory compliance, supplier risk and the evolving area of responsible AI.

You’ll play an important part in supporting the business’s data protection and governance frameworks, helping ensure privacy risks are identified, managed and properly documented as new projects, systems and technologies are introduced.

The Role

This is a broad operational role where you’ll work closely with the Data Protection Officer and colleagues across the business, including IT, Legal, HR, Procurement and other technical and business teams.

Key responsibilities will include:

• Supporting the administration of the OneTrust privacy management platform, maintaining workflows, records and reporting.
• Managing data subject access requests and other individual data rights requests, ensuring they are handled accurately and within statutory deadlines.
• Coordinating Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) and other risk assessments for new projects, systems and business initiatives.
• Maintaining data inventories, records of processing activities and supporting evidence for audit and governance purposes.
• Conducting supplier privacy due diligence and supporting reviews of data processing agreements and contractual safeguards.
• Assessing privacy and responsible-use risks associated with internal and third‑party AI solutions.
• Tracking actions, identifying potential control gaps and escalating material risks where appropriate.
• Helping embed a privacy-by-design approach across the business, providing practical guidance to stakeholders and supporting continuous improvement.

About You

We’re looking for someone organised, curious and proactive, with a genuine interest in data protection and the opportunity to develop their expertise in AI governance.

You’ll ideally have:

• At least three years’ experience in data protection, privacy, compliance, legal operations or a related risk role, preferably within insurance or financial services.
• A good working knowledge of UK GDPR, the Data Protection Act, data subject rights and DPIAs.
• Experience using OneTrust or a similar privacy management platform.
• An understanding of supplier risk, data processing agreements and international data transfers.
• An interest in AI governance and the privacy risks associated with emerging technologies.
• Strong communication skills and the confidence to work with a range of stakeholders across the business.

Relevant privacy qualifications, such as CIPP/E or CIPM, would be beneficial but are not essential.

Why Consider This Opportunity?

This is an excellent opportunity to join a thriving insurance business and build on your existing compliance or privacy experience in an area that continues to grow in importance.

You’ll gain exposure to both established data protection responsibilities and the developing field of AI risk, working alongside experienced colleagues in a collaborative environment that values flexibility, inclusion and professional development.

The Details

• Salary: Up to £80,000
• Location: London
• Working pattern: Hybrid, typically 1–2 days per week in the office
• Contract: 12-month fixed-term contract
• Working arrangements: Flexible options, including reduced hours and job-share partnerships, will be considered.

If you have a background in compliance or data protection and are keen to broaden your experience across privacy and AI governance, we’d love to hear from you.