Risk Analyst

At Smart, our mission is to transform retirement, savings and financial wellbeing, across all generations, around the world.

We are seeking an organised and proactive Risk Analyst to join our Risk and Privacy team. Reporting to the Senior Risk Manager, this is a hands‑on role at the centre of how Smart looks after personal data day to day. Your focus will be the running of our privacy operations – data subject rights requests, privacy incidents, records of processing, retention and privacy assessments – making sure each is handled properly, on time, and with a clear audit trail.

Smart is supported by outsourced privacy consultants who provide the specialist advice and carry out the detailed work. Your role is to keep the operation running around them – coordinating their input, tracking what they produce and making sure their advice is captured and acted on. Alongside this you will provide administrative and coordination support to the wider team, keeping meetings, actions, reporting and documentation running smoothly.

You will work closely with legal, compliance, information security, operations and customer services teams, and with the Data Protection Officer.

You do not need to be highly experienced in data protection to apply – we will train you. What matters is an interest in the subject, a methodical approach, and the judgement to handle sensitive information carefully. We will give you the support and training to build the technical knowledge you need.

• Manage the day‑to‑day privacy inbox, triaging incoming queries and either answering them or routing them to the right owner within agreed timescales.
• Coordinate data subject rights requests end to end, tracking each case against the one‑month statutory deadline, gathering material from business owners and preparing the response for review.
• Log and track privacy incidents and near misses, gathering the facts and following remediation actions through to closure.
• Maintain the privacy registers and supporting records – including the incident register, the Record of Processing Activities and the DPIA register – so documentation is complete, accurate and audit‑ready.
• Support the DPIA process and other project work, running the initial screening, chasing input from business owners and tracking assessments through to sign‑off.
• Support the periodic review of privacy notices, policies and procedures, and help track retention and the completion of privacy training.
• Act as a day‑to‑day point of contact for Smart’s outsourced privacy consultants, coordinating their input, tracking deliverables and making sure their advice is recorded and followed through.
• Help gather evidence for internal and external audits and client assurance requests relating to data protection.
• Prepare the underlying data for periodic privacy reporting, such as incident volumes and data subject rights numbers.

• Coordinate the team’s governance calendar – scheduling meetings and forums, preparing agendas and papers, taking minutes and maintaining action logs.
• Track actions and deadlines across the team, following up with owners so items are closed on time.
• Maintain team documentation and records, including version control, document libraries and central registers.
• Prepare and format reporting packs, papers and presentations for senior management and governance forums.
• Provide general administrative support to the team, including diary coordination, purchase orders and supplier onboarding administration.
• Support the onboarding of new team members, and maintain team process notes and how‑to guides.
• Contribute to improvements in team processes, templates and trackers to make them simpler and more efficient.

The…