Senior Data Privacy Analyst

Overview

As Senior Data Privacy Analyst, you will help embed a practical privacy culture across Lloyd’s. You’ll be a trusted adviser within the Legal – Commercial Team, guiding strategy, transformation and day-to-day data decisions. You’ll address data privacy risks, champion privacy by design, and support governance across the business. This role offers impact across a renowned, regulated market, with a focus on trust, compliance and meaningful risk insights. You’ll work with cross‑functional colleagues to protect personal data and sustain Lloyd’s reputation.

Pay / Benefits

• generous pension
• healthcare
• wellbeing programmes
• training and professional development support
• benefit allowance for flexible benefits (gym, dental, etc)
• cycle to work scheme

Responsibilities

• Provide expert, pragmatic advice on data privacy matters across the business
• Build relationships with stakeholders to embed data privacy obligations
• Support projects by championing privacy by design and identifying risks with solutions
• Manage DPIAs, data flow maps, and data protection action plans
• Support investigation and reporting of personal data breaches
• Manage Transfer Impact Assessments and advise on cross‑border transfers
• Maintain records of processing activities and data flow maps
• Serve as point of contact for privacy queries and data subject rights requests
• Produce management information to support risk oversight
• Monitor regulatory developments and translate them into practical insights

Key requirements

• Deep knowledge of UK and EU data protection frameworks (GDPR, UK GDPR, DPA 2019)
• Experience delivering DPIAs, data flow mapping, ROPA, and data subject access requests
• Advising on cross‑border transfers (SCCs, IDTAs, adequacy, TIAs)
• Ability to explain privacy concepts to non‑technical audiences
• Collaborative, influential mindset
• Experience with privacy management tools (OneTrust)
• Experience in insurance or regulated financial services is advantageous
• Professional privacy qualifications (e.g., CIPP/E or CIPM) welcomed but not required

• Collaborative and influential
• Clear communicator to non-technical audiences
• Risk‑aware decision making
• GDPR and UK GDPR expertise
• DPIA execution and data flow mapping
• ROPA maintenance

…