Hybrid Data Privacy Analyst

at Vanguard

• Job title: Data Privacy Analyst
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Manchester, United Kingdom

About the role

• Data Privacy Analyst role focused on managing privacy processes and compliance with European data protection laws. Involves stakeholder collaboration and development of privacy policies.

Responsibilities

• Monitor, analyse, and support compliance with European Data Protection Privacy laws including GDPR and Vanguard’s Global Privacy Policy
• Conduct and support privacy risk assessments such as Data Protection Impact Assessments (DPIAs), Transfer Impact Assessments (TIAs), and Legitimate Interest Assessments (LIAs)
• Maintain and update Records of Processing Activities (ROPAs) to ensure regulatory compliance
• Develop, implement, and continuously enhance privacy policies, procedures, and operational controls
• Provide guidance and training to stakeholders on privacy requirements and operational procedures, including leading privacy-related forums and training to increase awareness
• Support the maintenance and evolution of the privacy program framework, including policy and standard development, and oversee privacy incident control and response frameworks
• Consult with business leaders to implement Privacy by Design principles and assess data privacy and security risks to mitigate potential incidents
• Monitor emerging privacy risks in the industry and participate in privacy organizations to stay updated on best practices
• Oversee daily incident assignments, investigations, and ensure adherence to regulatory and notification requirements
• Collaborate with legal counsel to implement new privacy requirements and review program metrics to provide insights to management
• Participate in special projects as assigned

Requirements

• Relevant work experience in risk, compliance or regulatory roles, preferably within the financial services industry
• CIPP/E certification is preferred; CIPP/US certification is considered a plus
• An undergraduate degree or an equivalent combination of training and experience is required
• Strong stakeholder management skills with the ability to influence, prioritize, and communicate risks clearly
• Ability to interpret and apply privacy requirements to real-world business processes, systems, and data flows
• Strong administrative, organizational, program management, and presentation skills, with attention to detail and a practical, outcome-driven mindset
• Experience with privacy management tools such as OneTrust is a plus

Benefits

• Flexible working hours
• Professional development opportunities