Privacy Analyst

UK Operations are looking for a Privacy Analyst with experience to support an ongoing programme of works across privacy transformation as well as business as usual team activities. The analyst will be joining an established and experienced team with a clearroadmap to deliver, reporting to the UK Privacy Manager.

This is an operational role working on core privacy activities such as DSRs (Data Subject Rights Requests) and will suit someone with an analytical, highly organised mindset. There will be opportunities to work across emerging activities in information securityand third party risk in addition to a series of BAU responsibilities.

This is a role that will be visible to leadership and will have flexibility to work with teams across the business from marketing and underwriting to distribution and operations. Interpersonal skills and a 'can do' approach will be key.

A day in the life could involve managing the end-to-end workflow of a DSR request on OneTrust, navigating insurance systems and drafting responses to customers; a marketing and digital website compliance review or coordinating an audit of a third party supplier
- ensuring all the right steps have been taken to achieve compliance.

An analytical mindset, a keen attention to detail and a highly organised approach are key requirements. An interest in emerging technology - and the risks it presents will be important, although this skill that can be built over time.

If you have 1 to 3 years of experience working in data protection and privacy in any sector, have an interest in developing your skillset further and are looking for a new opportunity in a structured, friendly team then we would like to hear from you.

**What you'll be doing**:
**Privacy BAU**
- Supporting and managing DSARs (Data Subject Access Requests) and Erasure requests from customers
- Reviewing, responding and analysing data events including MI production
- Designing and running training to teams across the business as needed
- Responding to privacy related queries
- Initial reviews of impact assessments
- Supporting the UK Privacy Team's core control plan
- Deputise for the UK Privacy Manager as required

**Privacy transformation**
- Support implementation of UK business focussed infosec initiatives such as data transfer analysis, ensuring policy implementation and awareness
- Contribute and own tasks related with international data transfer compliance
- Track and monitor website governance activities and relevant reporting

**Third party risk management**
- Coordinate and engage third party vendor audits, credibly liaise with business critical partners, support relationship managers and run reporting processes

**Our must haves**
- 1 to 3 years privacy and data protection experience
- DSAR (Data Subject Access Request) handling experience
- A 'can do' mindset
- Highly organised
- A keen attention to detail with the ability to work autonomously on some tasks
- Excellent interpersonal skills - as you will be working with stakeholders and customers across the UK organisation
- Interest in privacy, infosec and third party risk with a view to support new initiatives and develop a managerial mindset

**Our nice to haves**
- A privacy qualification such as IAPP CIPP/E or CIPM - or the interest and drive to achieve certification with our sponsorship in the first year.
- Experience of OneTrust

**Diversity and flexible working at Hiscox**

At Hiscox we care about our people. We hire the best people for the job and we're committed to diversity and creating a truly inclusive culture, which we believe drives success. We also understand that working life doesn't always have to be 'nine to five'and we support flexible working wherever we can. No promises, but please chat to our resourcing team about the flexibility we could offer for this role.

We've introduced new hybrid ways of working to encourage a healthy work life balance.?

We see it as the best of both worlds: structure and sociability on one hand, and independence and flexibility on the other.
LI-LP1
LI-Remote