Senior Privacy Analyst

To be successful in this role, you'll ideally bring:

• A recognised privacy qualification such as CIPP/E, CIPM, CIPT, or equivalent. 

• A minimum of 3 – 5 years' experience in privacy, data protection, compliance, or privacy operations. 

• Strong working knowledge of UK GDPR, EU GDPR, the UK Data Protection Act 2018, ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks. 

• Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation. 

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance. 

• Excellent written and verbal communication skills. 

• Strong attention to detail and organisational capability. 

• The ability to manage competing priorities and work independently within a fast-paced environment. 

• A pragmatic, risk-based approach and collaborative mindset. 

• Experience with privacy management platforms and familiarity with productivity tools such as Copilot, Claude, or ChatGPT would be advantageous. 

• Additional European language skills are desirable

#LI-Hybrid

As a Senior Privacy Analyst, you will:

• Support the day-to-day operation of Verisk's UK/EMEA privacy programme.

• Assist business teams in maintaining Records of Processing Activities (ROPAs) and other compliance documentation.

• Support the development and maintenance of privacy policies, standards, procedures, templates, playbooks, and governance documentation.

• Coordinate and support Data Privacy Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).

• Work with stakeholders to identify, assess, and mitigate privacy risks across products, systems, vendors, business processes, and data initiatives.

• Manage and coordinate Data Subject Access Requests (DSARs), including intake, investigation, tracking, documentation, and stakeholder engagement.

• Support data mapping, data retention, minimisation, international transfer, and vendor risk management activities.

• Assist with privacy incident and breach response activities, including fact gathering, remediation tracking, reporting, and stakeholder coordination.

• Monitor developments in privacy, emerging regulatory areas (including AI where relevant), ePrivacy, and related regulatory frameworks.

• Support privacy training, awareness campaigns, and communications across the organisation.

• Maintain privacy metrics, dashboards, trackers, and reporting for management and governance forums.

• Provide guidance and support on privacy-related enquiries and assist with audits, due diligence requests, and compliance reviews.

To be successful in this role, you'll ideally bring:

• A recognised privacy qualification such as CIPP/E, CIPM, CIPT, or equivalent.

• A minimum of 3 - 5 years' experience in privacy, data protection, compliance, or privacy operations.

• Strong working knowledge of UK GDPR, EU GDPR, the UK Data Protection Act 2018, ePrivacy requirements, international data transfers, privacy-by-design principles, and accountability frameworks.

• Experience supporting privacy programme activities such as impact assessments, data mapping, DSARs, incident response, vendor reviews, training, and compliance documentation.

• The ability to interpret complex legal, regulatory, and technical requirements and translate them into practical business guidance.

• Excellent written and verbal communication skills.

• Strong attention to detail and organisational capability.

• The ability to manage competing priorities and work independently within a fast-paced environment.

• A pragmatic, risk-based approach and collaborative mindset.

• Experience with privacy management platforms and familiarity with productivity tools such as Copilot, Claude, or ChatGPT would be advantageous.

• Additional European language skills are desirable

#LI-Hybrid