Personal Data Protection Analyst – GDPR

act digital; Lisboa; Hybrid; EUR 30,000 - 52,000; Full time

Job summary

A leading digital consultancy in Lisbon is seeking a Personal Data Protection Analyst to oversee GDPR activities and ensure compliance with Privacy by Design principles. The role involves supporting project managers, managing data subject requests, and promoting a strong data protection culture. Ideal candidates will possess a deep understanding of GDPR, proficiency in MS Office, and experience with project management tools. This position offers a hybrid work model, with presence required in the office 2-3 times a week.

Qualifications

• Strong knowledge of GDPR principles and personal data protection requirements.
• Full proficiency with MS Office tools.
• Experience with project management tools and methodologies.
• Ability to work in structured compliance and governance environments.

Responsibilities

• Ensure project validation processes comply with Privacy by Design principles.
• Support Project Managers on data protection and GDPR-related activities.
• Manage incoming internal and external requests via the GDPR desk mailbox.
• Handle Data Subject Rights Requests (DSRRs) and related follow-up.
• Promote and contribute to a strong personal data protection culture.
• Develop, document, and share best practices with the data protection network.
• Collaborate closely with 1LoD stakeholders and 2LoD privacy/DPO teams.

Skills

Knowledge of GDPR principles

Proficiency with MS Office

Project management tools

Compliance and governance

Data protection

Job description

We are looking for a Personal Data Protection Analyst to support day-to-day GDPR business-as-usual activities within the 1st Line of Defense (1LoD).

This role focuses on ensuring Privacy by Design principles are embedded into projects and operations, while acting as a key point of contact for data protection matters in close collaboration with central data, privacy, and risk teams.

Key Responsibilities

• Ensure project validation processes comply with Privacy by Design principles
• Support Project Managers on data protection and GDPR‑related activities
• Manage incoming internal and external requests via the GDPR desk mailbox
• Handle Data Subject Rights Requests (DSRRs) and related follow‑up
• Promote and contribute to a strong personal data protection culture
• Develop, document, and share best practices with the data protection network
• Collaborate closely with 1LoD stakeholders and 2LoD privacy / DPO teams

Required Skills & Experience

Technical & Functional Skills

• Strong knowledge of GDPR principles and personal data protection requirements
• Full proficiency with MS Office tools
• Experience with project management tools and methodologies
• Ability to work in structured compliance and governance environments

Hybrid Work: 2/3x a week in the office (Lisboa/Porto)

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Consulting

Industries

IT Services and IT Consulting, Banking, and Investment Banking

Referrals increase your chances of interviewing at act digital by 2x