Privacy & Data Risk Analyst (Hybrid)

Smart Pension; City Of London; Hybrid; GBP 42,000 - 65,000; Full time

Benefits offered by this job

25 days holiday

Training budget

Private healthcare

Enhanced sick leave

Maternity/Paternity

Death in service

Sabbatical

Wellbeing benefits

Arena Flowers discount

Job summary

Smart is seeking an organised Risk Analyst to join the Risk and Privacy team in London. The role focuses on privacy operations, data subject rights, incidents, and DPIA records. You will coordinate with outsourced privacy consultants and provide administrative support across the team.

No deep prior experience is required; training will be provided. The role collaborates with legal, compliance, information security, and customer services teams in a hybrid London setting.

Qualifications

• Interest in data protection and privacy; training provided.
• Experience in privacy, risk, compliance, audit, or operations is helpful.
• Awareness of UK GDPR concepts and data protection fundamentals.

Responsibilities

• Manage day-to-day privacy inbox and triage queries.
• Coordinate data subject rights end-to-end and track deadlines.
• Log privacy incidents and drive remediation to closure.
• Maintain privacy registers and DPIA records for audit readiness.
• Support DPIA process and project work with owners' input.
• Prepare privacy notices and track retention/training completion.
• Coordinate with outsourced privacy consultants and document actions.
• Assist audits and client assurance requests with evidence gathering.
• Prepare data for periodic privacy reporting (incidents, rights).

Skills

Data protection

Organisational skills

Attention to detail

Communication

Analytical skills

Collaboration

Education

Degree in law / risk management / business

Job description

Smart is seeking an organised Risk Analyst to join the Risk and Privacy team in London. The role focuses on privacy operations, data subject rights, incidents, and DPIA records. You will coordinate with outsourced privacy consultants and provide administrative support across the team.

No deep prior experience is required; training will be provided. The role collaborates with legal, compliance, information security, and customer services teams in a hybrid London setting.