Privacy Analyst II — DPIAs, Incident Response

Whereby; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Kraken in the United Kingdom is seeking a Privacy Analyst to help shape our data protection framework across products and services. You will lead data incident response, conduct DPIAs/PIAs, and collaborate with engineering, legal, and InfoSec to embed Privacy by Design and ensure regulatory compliance.

You’ll translate complex privacy requirements into actionable guidance, manage processing activity records, and support vendor due diligence.

Qualifications

• Significant operational experience in data privacy, DPIAs/PIAs, vendor management, and risk management.
• Experience working with cross-functional teams including engineering, legal and InfoSec.

Responsibilities

• Lead data incident response including logging, investigation, root cause analysis and regulatory reporting.
• Collaborate with product, engineering, legal and security teams to ensure compliance with data protection regulations and client requirements.
• Advocate for privacy by design and default; embed privacy requirements into SDLC and engineering workflows.
• Conduct and support DPIAs/PIAs for products and processing activities, including risk mitigation and risk register management.
• Support client delivery teams in answering data protection processing/handling queries, RFPs and audits.
• Lead third-party vendor due diligence and oversee subprocessor obligations with InfoSec, Legal and Procurement.
• Develop and deliver training and knowledge content on global data protection.
• Maintain records of processing activities across Kraken and subsidiaries.

Skills

Data incidents

DPIAs/PIAs

Records of processing

Engineering collaboration

GDPR knowledge

Privacy by Design

Stakeholder management

Communication skills

Autonomy

Job description

Kraken in the United Kingdom is seeking a Privacy Analyst to help shape our data protection framework across products and services. You will lead data incident response, conduct DPIAs/PIAs, and collaborate with engineering, legal, and InfoSec to embed Privacy by Design and ensure regulatory compliance.

You’ll translate complex privacy requirements into actionable guidance, manage processing activity records, and support vendor due diligence.