Data Privacy Analyst - Internal Applicants Only

***This role is currently only open to employees of Arbuthnot Latham***

Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job Purpose

Support the Bank's data privacy and data protection activities through the administration of the Privacy Management Framework, data protection risk management processes, regulatory compliance activities, privacy governance reporting and records management. The role provides an entry point into privacy and information management, developing practical experience across data protection, regulatory compliance, operational resilience and information governance whilst supporting the effective operation of the Bank's privacy framework.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities:

• Support the operation and maintenance of the Privacy Management Framework and associated governance documentation.
• Maintain Records of Processing Activities (RoPA) and data processing inventories.
• Administer privacy risk registers, ensuring risks, issues, actions and assessments are accurately recorded and tracked.
• Coordinate evidence collection for GDPR, UK Data Protection Act, regulatory reviews and assurance activities.
• Support Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and privacy-by-design reviews.
• Assist with the management and tracking of data subject rights requests (DSARs), rectification, erasure and portability requests.
• Support personal data breach management activities, including incident logging, investigation coordination and remediation tracking.
• Assist with third-party privacy due diligence and supplier assurance activities.
• Support privacy awareness, training and communication programmes across the organisation.
• Produce privacy dashboards, management information, key risk indicators and governance reporting.
• Maintain privacy action logs, regulatory findings and remediation plans.
• Support compliance with UK GDPR, Data Protection Act 2018, PECR and related regulatory requirements.
• Develop professional knowledge and capability across data protection, privacy and information governance disciplines.

Key Interfaces:

• Data Protection Officer (DPO)
• Senior Privacy Manager
• Legal
• Risk & Compliance
• Operational Resilience
• Technology Teams
• Cyber Security
• Human Resources
• Third-Party Suppliers
• Internal Audit
• Business Data Owners
• External Regulators and Assessors

Person Specification

Knowledge/ Experience/Skills:

• Strong administration, coordination or analytical skills.
• Ability to manage multiple activities and maintain accurate records and documentation.
• Strong written and verbal communication skills with the ability to explain regulatory and privacy requirements clearly.
• Good organisational skills and attention to detail.
• Understanding of data protection, privacy and information governance principles.
• Knowledge of UK GDPR, Data Protection Act 2018 and data subject rights requirements.
• Familiarity with Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Understanding of personal data breaches, incident management and regulatory notification requirements.
• Experience using Microsoft 365 and reporting or document management tools.
• Ability to analyse information, identify trends, risks and compliance issues, and escalate where appropriate.
• Ability to maintain accurate records, action tracking and evidence repositories.
• Understanding of third-party data processing and supplier assurance requirements.
• Demonstrable interest in privacy, regulatory compliance, information governance or risk management.

Qualifications:

Minimum of one below is required:

• Educated to A-Level standard (or equivalent experience).

Desirable:

• Degree or equivalent qualification in Law, Information Governance, Data Protection, Risk Management, Business, Information Technology or a related discipline.
• IAPP Certified Information Privacy Manager (CIPM).
• BCS Practitioner Certificate in Data Protection.
• GDPR Foundation or Practitioner Certification.

Competencies:

• Problem Solving and Judgment
• Customer Focus
• Planning and Reviewing
• Performance Focus
• Communication and Confidence
• Attention to Detail
• Integrity