Data Privacy & GDPR Analyst

Data Privacy Framework & Oversight Analyst

Rev & Regs is seeking a Privacy Framework and Oversight Analyst to work for a dynamic and well‑respected financial services firm in Liverpool. The Privacy Framework and Oversight Analyst plays a key role in supporting the organisation’s data protection programme, maintaining and enhancing the privacy framework and ensuring delivery of operational BAU processes and oversight of privacy risks.

This role involves collaboration with the Group DPO and key stakeholders across the business to mature data protection compliance and foster a culture of accountability and transparency.

Responsibilities include:

• Support the development, implementation, and continuous improvement of the organisation’s privacy framework, policies, and procedures.
• Provide oversight and advice to assist the development and implementation of all key data policies, including policies on data retention, classification, quality, and AI.
• Support the operational delivery of the second line data protection programme, including DSAR triage, breach logging and core components of the data protection programme.
• Maintain accurate registers (DPIA, SAR, Breach, ROPA, Accountability tracker) and ensure timely updates.
• Support second line oversight / monitoring of data protection and data/records governance, including retention, deletion, data lifecycle controls, data classification and AI.
• Assist with the maintenance of the Record of Processing Activities (ROPA) and linked records of lawful basis, retention, and risks.
• Provide advice to the business and where required assist with providing targeted training, including drafting training materials and communications.
• Contribute to the development and improvement of workflows, registers, and second line systems and tooling.
• Engage and manage stakeholders around the business in relation to data topics.
• Support assurance activities including monitoring, evidence gathering, and thematic reviews.
• Assist in producing MI reporting to provide visibility over privacy operations and compliance activity.
• Liaise with Data Privacy Managers and business support teams to ensure seamless escalation and collaboration.

Key experience and skills:

• Good knowledge of UK GDPR and the Data Protection Act 2018.
• Practical experience working in a data protection role, handling data subject rights requests and breaches, and developing and implementing policies and processes.
• Strong technical, analytical and problem‑solving skills with attention to detail.
• Excellent verbal and written communication, including formal report writing.
• Experienced stakeholder management and engagement.
• Experience in privacy teams, data protection or records management.
• Experience in financial services or regulated sectors preferred.

Location: Hybrid (2 days per week in Liverpool office)

Seniority level: Entry level

Employment type: Full‑time

Job function: Other and Legal