Privacy Analyst

JR United Kingdom; Swindon; Remote; GBP 30,000 - 45,000; Full time

Job summary

A leading company is seeking a Privacy Analyst to support the Legal and Compliance teams in its privacy program. This hands-on role is perfect for someone early in their privacy career who wishes to develop their skills in a fully remote setting while contributing to critical data protection efforts.

Qualifications

• Approx 1-2 years in privacy law or compliance.
• Eager to learn and grow in a regulated environment.

Responsibilities

• Assist in maintaining the Record of Processing Activities (ROPA).
• Support the review and triage of Data Subject Access Requests (DSARs).
• Conduct privacy impact assessments (PIAs) under supervision.

Skills

Data protection regulations

Privacy impact assessments

Data Subject Access Requests

Data flow documentation

Tools

OneTrust

Job description

Social network you want to login/join with:

As a Privacy Analyst, you will support the Legal and Compliance teams in the day-to-day operations of our privacy program.

This is a hands-on role ideal for someone early (approx 1-2 years) in their privacy career who is eager to learn, grow, and contribute to meaningful work in a regulated, data-rich environment.

This role will be fully remote, will very occasional travel to UK offices.

Key Responsibilities

• Assist in maintaining the Record of Processing Activities (ROPA) and ensuring it remains up to date.
• Support the review and triage of Data Subject Access Requests (DSARs), including logging, tracking, and coordinating responses.
• Help conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) under supervision.
• Monitor and document data flows and assist in mapping personal data across systems and services.
• Collaborate with cross-functional teams (e.g., Product, Engineering, InfoSec) to gather information for privacy reviews.
• Support the implementation and maintenance of privacy policies, procedures, and training materials.
• Assist with privacy-related audits and internal reporting using tools such as OneTrust or similar platforms.
• Stay informed about relevant data protection regulations (e.g., UK GDPR, DPA 2018) and industry best practices.