Senior Privacy Analyst

0400 FBD USA LLP; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Freshfields seeks an experienced Senior Privacy Analyst to join its Privacy Office, supporting global data protection compliance. You will help operationalise privacy requirements, maintain key documentation, administer DSARs, and contribute to privacy-by-design initiatives; work closely with the Senior Privacy Manager and team.

You will lead privacy assessments, manage data incident responses, and mentor less experienced colleagues while promoting strong collaboration across practice groups and

Qualifications

• Substantial experience in privacy operations within a top-tier global law firm or banking/finance.
• Experience applying UK and European data protection requirements in a business environment.
• Experience coordinating DSARs and other data subject rights requests.

Responsibilities

• Complete privacy impact assessments and DPIAs; perform vendor and tech due diligence including AI tools.
• Coordinate data subject rights requests and manage DSAR processing.
• Maintain Privacy Office documentation, communications and records.
• Assist with data incident investigation and reporting.
• Provide day-to-day privacy guidance and assist with privacy-by-design initiatives.
• Project manage initiatives to improve internal privacy processes.
• Mentor junior team members with support from the Senior Privacy Manager.

Skills

Privacy operations

DSAR coordination

Data protection

UK/EU law

AI privacy

Mentoring

Communication

Tools

Microsoft Office

Job description

Role summary/purpose of job

We are seeking an experienced Senior Privacy Analyst to join the Firm’s Privacy Office supporting the Firm’s practice groups and business services teams. You will play a critical part in delivering core privacy operation services to support our global data protection compliance program. As a senior analyst, you will work closely with Senior Privacy Manager and other Privacy Office team members to operationalise privacy requirements, maintain key privacy documentation, conduct privacy assessments, administer data subject rights and contribute to privacy-by-design initiatives across the firm.

Key responsibilities

• Completion of privacy impact assessments and DPIAs, undertaking vendor and technology due diligence, in particular for AI and innovative legal tech tools.
• Coordinate and manage data subject rights requests, including DSARs, rights of erasure and other rights requests.
• Maintain Privacy Office template documentation, communications and records.
• Assist with data incident investigation and reporting.
• Provide pragmatic day-to-day guidance to colleagues, supporting projects, and business change initiatives while promoting privacy by design.
• Project manage internal initiatives aimed at improving internal processes to meet data protection compliance aims.
• Work with the Senior Privacy Manager to mentor less experienced team members.

Skills, Qualifications and Experience

• Substantial experience working in a privacy operations function, preferably within a top tier global law firm or banking and finance industry.
• Proven experience applying UK and European data protection requirements in a business environment.
• Experience supporting and/or coordinating Data Subject Access Requests (DSARs) and other data subject rights requests.
• Strong organisational skills with the ability to work autonomously and manage multiple priorities and deadlines effectively.
• Excellent written and verbal communication skills, with the ability to explain complex data protection requirements succinctly to a range of stakeholders.
• Collaborative team player with ability to maintain working relationships and influence stakeholders across different teams.
• Confident AI user with strong skills in Microsoft Office applications, particularly Outlook, Word, Excel and PowerPoint.
• Experience producing reports, dashboards, metrics or management information would be advantageous.
• Desirable German language skills.
• Knowledge of data protection laws outside of UK/Europe.
• IAPP (CIPP/E, CIPM, CIPT) or similar privacy certification.
• Experience with legal tech, AI, or data ethics frameworks.

Department Overview

The Legal Department is mad up of both qualified lawyers and non-lawyers, exists to manage the firm’s risk exposure and to provide advice to the partners on a range of legal and compliance issues. The role of the Legal Department is to support partners and staff in pursing the effective management of regulatory, legal, operational, and information security risk to preserve and maximise the value of the firm over the long term. We do this by taking responsibility for a range of actions, by sharing in the performance of others and by assisting partners and staff to manage risk themselves through training, awareness raising and the provision of relevant intelligence, services and materials. Our vision is for our department to be recognised as a leader amongst comparable, elite, law firms. That means being acknowledged internally as providing an excellent service in a commercial and empathetic manner. It means adequately meeting the needs of the firm while remaining agile and cost effective; constantly refining our techniques, objectives and ways of working to respond to changes in the business and the threats we face.

Inclusion

Freshfields is an equal opportunities employer and all applications received by the firm will be considered on the basis of their merit alone. We welcome applications from all suitably qualified individuals regardless of background. All offers of employment will be conditional on the candidate having/securing the right to work in the UK in the role in question and providing the firm with evidence of that right (as required by the Immigration, Asylum and Nationality Act 2006) prior to employment commencing. Freshfields is a Ban the Box employer. We ask applicants to disclose criminal convictions only if and when a conditional job offer is made. A conviction does not automatically lead to withdrawal of the offer: we make decisions on a case-by-case basis and take a number of relevant factors into account (e.g. the role you are applying for and the circumstances of the offence). You would have the opportunity to discuss the matter with us before we make a decision.

Freshfields is a global law firm with a long-standing track record of successfully supporting the world’s leading national and multinational corporations, financial institutions, and governments on ground-breaking and business critical mandates. At Freshfields we seek to create a better future for our clients, our people and the communities in which we work. Our global teams bring together individuals with different experiences, skills and strengths in a culture where we support all to belong, engage and excel.