Data Protection Analyst

Job Description

hackajob is collaborating with Heathrow to connect them with exceptional professionals for this role.

n

Description

n

This role supports the day-to-day operation of the Office of the Data Protection Officer (DPO), ensuring the effective management of privacy-related activities across the organisation. The position plays a key role in overseeing privacy complaints, managing the end-to-end process for rights requests and incident management, and providing advice and guidance on a wide range of privacy matters.

n

Working with both internal and external stakeholders, you will be responsible for driving process improvements, developing reports and dashboards, supporting compliance assessments and privacy-by-design initiatives, and enhancing the DPO Office’s online presence. The role also contributes to the organisation’s digital transformation journey, helping to evolve and strengthen privacy services, processes, and stakeholder engagement.

n

Responsibilities

n

n
• Coordinate and manage core DPO activities, including compliance reviews, reporting, stakeholder communications, and the scheduling of regular privacy-related activities.

n

• Support the complaints process, ensuring timely investigation, stakeholder engagement, record-keeping, reporting, dashboard creation, and professional resolution within agreed timescales.

n

• Operate, maintain, and continuously improve the rights requests process, ensuring compliance with statutory deadlines, monitoring performance, and engaging effectively with internal and external stakeholders.

n

• Provide privacy advice and guidance to stakeholders, supporting privacy-by-design principles, data protection assessments, compliance activities, and the timely completion of privacy-related requirements.

n

• Maintain and enhance the Office of the DPO's digital presence and knowledge resources, including the management of online content, self-service tools, training materials, and the team inbox.

n

• Support privacy incident and third-party risk management, including investigations, fact-finding, reporting, mitigation activities, lessons learned, and oversight of personal data processing by suppliers and partners.

n

• Produce and analyse privacy management information, including KPIs, dashboards, reports, and trend analyses, identifying opportunities for process improvement and enhancing the effectiveness of the privacy function.

n

n

Qualifications

n

n
• Knowledge of data protection legislation, including UK GDPR, PECR, the Data (Use and Access) Act (DUAA), and related privacy regulations.

n

• Experience of working in a fast-paced environment, managing competing priorities, ad hoc requests, and fixed deadlines.

n

• Strong stakeholder management skills, with the ability to build and maintain positive relationships across a range of internal and external stakeholders.

n

• Proven ability to work collaboratively as part of a team while managing responsibilities independently. 

n

n

Ideally, you'll also have:

n

n
• Degree-level qualification, apprenticeship, or equivalent relevant work experience.

n

• Professional privacy qualifications such as CIPP/E, CIPM, or equivalent certifications.

n

• Experience of using Microsoft 365 applications, including SharePoint, Excel, and Office 365 eDiscovery, as well as Adobe Acrobat Pro.

n

• Experience of web content management or webpage design.

n

• Experience of service design, implementation, monitoring, and continuous improvement. 

n

n

#LI-Hybrid

…