Data Privacy Analyst, Specialist at Vanguard in London

Job description

Data Privacy Analyst The Role Our Privacy Team is dedicated to helping Vanguard protect personal information and uphold the trust placed in us by our clients, crew, and regulators. We provide expert guidance on privacy and data protection, helping the business navigate evolving regulatory requirements while enabling the responsible use of data. Working closely with colleagues across business, technology, legal, compliance, and risk teams, you will embed privacy into the design of products, services, processes, and emerging technologies. We are a collaborative and inclusive team that values diverse perspectives, practical problem-solving, and continuous learning. Joining our team offers the opportunity to make a meaningful impact by helping shape privacy practices across a global organisation. You'll contribute to protecting individuals' rights, influencing how data is used responsibly, and supporting innovation in a way that aligns with Vanguard's commitment to doing the right thing for our clients and crew. In this role you will · Provide expert advice on privacy and data protection requirements, including UK GDPR, EU GDPR, ePrivacy requirements, AI-related privacy obligations, and other applicable regulations. · Serve as a trusted advisor to stakeholders, embedding Privacy by Design principles into new products, technologies, processes, and strategic initiatives · Lead privacy-related forums and trainings to increase awareness around the privacy program as well as to ensure adherence to data privacy laws and regulations. · Oversee daily incident assignments, investigations and response activities to ensure adherence to applicable regulatory and notification requirements. · Review business initiatives, projects, and technology implementations to identify privacy risks and compliance obligations. Privacy Risk Management · Conduct and review Privacy Risk Assessments (PRAs), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and other privacy risk assessments. · Identify privacy risks and recommend proportionate mitigation strategies. · Monitor and track remediation activities for privacy-related findings and control gaps. · Support the maintenance of privacy risk registers and issue management activities. · Provide privacy guidance when onboarding third-party services and vendor engagements Privacy by Design · Embed Privacy by Design and Default principles in business processes, products, systems, and AI solutions. · Partner with technology, cybersecurity, legal, compliance, and risk teams throughout project lifecycles. · Review data flows, retention practices, consent mechanisms, and transparency requirements. · Provide guidance on data minimisation, purpose limitation, and lawful processing. What it takes · Experience in privacy, data protection, compliance, risk, legal, governance, or a related field. · A strong understanding of privacy principles and data protection requirements. · The ability to assess risks, solve problems, and provide clear, practical advice. · Strong communication and stakeholder management skills, with the confidence to work across different teams and levels of the organisation. · A collaborative mindset and a willingness to learn from and support others. · Sound judgement and the ability to balance regulatory requirements with business objectives. · An interest in emerging technologies, data-driven innovation, and the evolving privacy landscape. Most importantly, we're looking for people who are committed to protecting individuals' privacy, building trusted relationships, and contributing to an inclusive team where diverse perspectives and experiences are valued. Qualifications · Privacy related experience, compliance or regulatory experience in the financial services industry preferred. · Bachelor's degree in Law, Information Management, Business, Risk Management, or related discipline. · Significant experience in privacy, data protection, compliance, risk, legal, or