Privacy & Data Governance Specialist (12-Month Contract)

IDEX Consulting Ltd; Greater London; On-site; GBP 45,000 - 60,000; Full time

Job summary

IDEX Consulting Ltd is seeking a Privacy Analyst to join a leading specialist insurance business in the City of London on a 12-month fixed-term contract. You will support day-to-day privacy operations, maintain governance processes and contribute to AI governance and responsible data use.

You will work with the Data Protection Officer and cross-functional teams to ensure privacy processes are effective, records are kept up-to-date and risks are addressed.

Qualifications

• Experience in data protection, privacy, compliance or related operational risk.
• Practical knowledge of UK GDPR and Data Protection Act requirements.
• Hands-on experience administering OneTrust or a comparable privacy management platform.
• Experience with DPIAs, data mapping, ROPA and Data Subject Rights Requests.
• Understanding of supplier risk assessments and data processing agreements.

Responsibilities

• Administer and maintain OneTrust platform including workflows, templates, permissions and reporting.
• Maintain data inventories, data maps and ROPOs (Records of Processing Activities).
• Coordinate Data Subject Rights Requests, including Subject Access Requests, meeting statutory deadlines.
• Manage privacy screening for new projects and systems.
• Coordinate PIAs and DPIAs and related risk assessments.
• Support supplier privacy due diligence and review data processing agreements.
• Conduct privacy and responsible-use risk assessments for internal and third-party AI solutions.
• Assess AI-related risks around data usage, provenance, transparency and security.
• Maintain compliance records and track remediation actions.

Skills

OneTrust administration

Privacy compliance

Data mapping

DPIAs

PIAs

Education

CIPP/E or CIPM

Tools

OneTrust

Job description

IDEX Consulting Ltd is seeking a Privacy Analyst to join a leading specialist insurance business in the City of London on a 12-month fixed-term contract. You will support day-to-day privacy operations, maintain governance processes and contribute to AI governance and responsible data use.

You will work with the Data Protection Officer and cross-functional teams to ensure privacy processes are effective, records are kept up-to-date and risks are addressed.